Last Updated on January 30, 2023

In August, Shopware has come up with its latest release of Shopware 6.4.3.1. This Shopware new release is a package that is cumulative and includes various bug fixes and new features. It requires Shopware 6.3.0.0 or newer.

The Shopware 6.4.3.1 release, the Shopware team has closed security gaps of the threat level “medium” and “critical.” All these mentioned issues were discovered in an internal penetration test. The affected Shopware versions are from Shopware 6.1.0 to Shopware 6.4.3.0. The following vulnerabilities have been fixed with this update:

  • NEXT -15601: Product reviews manipulation through the API
  • NEXT -15673: Authenticated server-side request forgery in file upload via URL
  • NEXT -15677: Cross-Site Scripting via SVG media files
  • NEXT -15675: Insecure direct object reference of log files of the Import/Export feature
  • NEXT -15699: Command injection in mail agent settings

At Emizentech, as a reputed Shopware development company, we recommend you to update your Shopware version to 6.4.3.1. You can get the update to 6.4.3.1 regularly either through the Auto-Updater or directly through the download overview.

https://www.shopware.com/en/download/?_ga=2.24297458.955105553.1629772925-1889580694.1620568417#shopware-6

How can we help?

We at Emizentech, are having expertise in developing Shopware stores from scratch and upgrading their versions. Our developers are also experts in implementing new features and functionalities on the Shopware stores. Let us know your requirements.

Also, learn about the other major Shopware Releases

Avatar photo
Author

Founder and tech lead at Emizentech, Mr. Vivek has over ten years of experience in developing IT infrastructures and solutions. With his profound knowledge in eCommerce technologies like Shopware, Magento, and Shopify, Mr. Vivek has been assisting SMEs to enterprises across the globe by developing and maintaining their eCommerce applications. Technology innovation and trends insight come easy to Vivek with his thorough knowledge in the eCommerce domain. See him talking about ideas, trends, and technology in this blog. To know more about how Team Vivek can assist you in your eCommerce strategy? Connect team Vivek here.

whatsapp