Security Advisory

CVE-2022-24956

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-29 01:08:12

Last updated 2024-08-03 04:29:01

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2border and b2borderlist allows SQL injection. Possible techniques are boolean-based blind, time-based blind, and potentially stacked queries. The vulnerability allows a remote authenticated attacker to dump the underlying database.

← Browse all CVEs View on cve.org ↗