Security Update 10/2017

Valid from version:
5.0.0
Valid to version:
5.3.3

General informations to the Shopware security update

Next to the usual bug fixes and optimisations, we have also been able to close three moderate vulnerabilities.
All Shopware Versions from 5.0.0 up to 5.3.3 are affected.

The following vulnerabilities are fixed with this release.

  • SW-19834: Authenticated Backend and persistent XSS
  • SW-19895: Authenticated Backend SQL Injection
  • SW-19896: Authenticated Backend XXE

You can choose between two options, to protect your system:

Update Shopware (recommended)

We strongly recommend to update to the latest version of Shopware(5.3.4). This Version will fix these vulnerabilities. You can use the auto-update process or simply download the version over our download page.

Install / update the security plugin

If it is not possible for you to update to the latest version of shopware, you can use our Shopware Security-Plugin.

  • Download the Shopware Security Plugin from our store or use the Plugin Manager of your Shopware backend.
  • Install and activate the plugin.

If you use this plugin already, simply update it to the latest version to secure your environment.

our environment.

Suggested Items

Security Update 04/2016

Security Update Information Under certain conditions it is possible to execute unauthorized code in Shopware. This is a critical security vulnerability that not only affect the functions of the shop. It can also have an impact on the...

read more

Security Update 06/2017

General information about the Shopware security update Under certain circumstances, itís possible to execute an authorized foreign code in Shopware. This is a security vulnerability that could affect the entire system. All Shopware versions...

read more

Security Update 01/2018

General informations to the Shopware security update Next to the usual bug fixes and optimisations, we have also been able to close two moderate vulnerabilities. All Shopware Versions from 5.2.0 up to 5.3.6 are affected. The following...

read more
$ 13,62

Prices incl. legal
VAT + Shipping rates & policies*