Authenticated Stored XSS in shopware/shopware
### Impact Authenticated Stored XSS in Administration ### Patches Use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html ### Workarounds If you cannot use the security plugin, add the following config to your `.htaccess` file ``` <IfModule mod_headers.c> <FilesMatch "\.(?i:svg)$"> Header set Content-Security-Policy "script-src 'none'" </FilesMatch> </IfModule> ``` If you are using nginx as server config, you can add the following to your configuration: ``` server { # ... location ~* ^.+\.svg$ { add_header Content-Security-Policy "script-src 'none'"; } } ``` ### References https://docs.shopware.com/en/shopware-5-en/sicherheitsupdates/security-update-10-2021
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-41188US | medium5.4 | — | ||
Shopware is open source e-commerce software. Versions prior to 5.7.6 contain a cross-site scripting vulnerability. This issue is patched in version 5.7.6. Two workarounds are avail… | ||||
references
External citations — patches, advisories, analysis.
- https://docs.shopware.com/en/shopware-5-en/sicherheitsupdates/security-update-10-2021WEB
- https://github.com/shopware/shopwarePACKAGE
- https://github.com/shopware/shopware/commit/37213e91d525c95df262712cba80d1497e395a58WEB
- https://github.com/shopware/shopware/releases/tag/v5.7.6WEB
- https://github.com/shopware/shopware/security/advisories/GHSA-4p3x-8qw9-24w9WEB
- https://nvd.nist.gov/vuln/detail/CVE-2021-41188ADVISORY
- https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.htmlWEB
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan