CVE-2023-22730

Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible to put the same line item multiple times in the cart using the AP. The Cart Validators checked the line item's individuality and the user was able to bypass quantity limits in sales. This problem has been fixed with version 6.4.18.1. Users on major versions 6.1, 6.2, and 6.3 may also obtain this fix via a plugin.

• CWE-20

• https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updatesPatch, Vendor Advisory
• https://github.com/shopware/platform/commit/4fce12096e54b2033832d9104fa2e68888c2b4e9Patch, Third Party Advisory
• https://github.com/shopware/platform/security/advisories/GHSA-8r6h-m72v-38fgThird Party Advisory
• https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-01-2023?category=security-updatesPatch, Vendor Advisory
• https://github.com/shopware/platform/commit/4fce12096e54b2033832d9104fa2e68888c2b4e9Patch, Third Party Advisory
• https://github.com/shopware/platform/security/advisories/GHSA-8r6h-m72v-38fgThird Party Advisory

Published

Jan 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22725GLPI is a Free Asset and IT Management Software package. Ver…4.8
• CVE-2023-22726act is a project which allows for local running of github ac…8.8
• CVE-2023-22727CakePHP is a development framework for PHP web apps. In affe…9.8
• CVE-2023-22728Silverstripe Framework is the Model-View-Controller framewor…4.3
• CVE-2023-22729Silverstripe Framework is the Model-View-Controller framewor…6.1
• CVE-2023-2273Rapid7 Insight Agent token handler versions 3.2.6 and below,…7.5
• CVE-2023-22731Shopware is an open source commerce platform based on Symfon…8.8
• CVE-2023-22732Shopware is an open source commerce platform based on Symfon…9.8
• CVE-2023-22733Shopware is an open source commerce platform based on Symfon…6.5
• CVE-2023-22734Shopware is an open source commerce platform based on Symfon…7.5
• CVE-2023-22735Zulip is an open-source team collaboration tool. In versions…4.6
• CVE-2023-22736Argo CD is a declarative, GitOps continuous delivery tool fo…8.5