Detections
Analytics
SCA: security update for shopware/core, shopware/platform (GHSA-r2vg-hvjm-fg38)
high Tenable Self-Hosted Container Security Plugin ID 435694
Description
Shopware Customer Orders can be canceled, even if refunds are disabledSee Also
Plugin Details
Severity: High
ID: 435694
Version: Revision 1.2
Type: Local
Family: SCA Checks
Published: 10/21/2025
Updated: 1/28/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 10/21/2025
Vulnerability Publication Date: 10/21/2025
Reference Information
cwe: CWE-862