{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-23T20:57:03.769","vulnerabilities":[{"cve":{"id":"CVE-2023-34098","sourceIdentifier":"security-advisories@github.com","published":"2023-06-27T17:15:09.683","lastModified":"2024-11-21T08:06:32.433","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Shopware is an open source e-commerce software. Due to an incorrect configuration in the `.htaccess` file, the configuration file of the Javascript could be read in production environments (`themes/package-lock.json`). With this information, the specific Shopware version in a deployment might be determined by an attacker, which could be used for further attacks. Users are advised to update to version 5.7.18. There are no known workarounds for this vulnerability.\n"}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":5.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":1.4}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*","versionStartIncluding":"5.6.0","versionEndExcluding":"5.7.18","matchCriteriaId":"53316913-DCF1-4ED6-B9D6-05867CD86BCF"}]}]}],"references":[{"url":"https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-06-2023","source":"security-advisories@github.com","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/shopware/shopware/security/advisories/GHSA-q97c-2mh3-pgw9","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://github.com/shopware5/shopware/commit/b3518c8d9562a38615d638f31f79829f6e2f4b6a","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://www.shopware.com/en/changelog-sw5/#5-7-18","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-06-2023","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"https://github.com/shopware/shopware/security/advisories/GHSA-q97c-2mh3-pgw9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://github.com/shopware5/shopware/commit/b3518c8d9562a38615d638f31f79829f6e2f4b6a","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://www.shopware.com/en/changelog-sw5/#5-7-18","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"]}]}}]}