CVE-2022-24872

CVE-2022-24872 is a high-severity vulnerability in Shopware, an open commerce platform, affecting versions 6.1, 6.2, 6.3, and 6.4. It allows an authenticated attacker to exploit improperly maintained permissions, enabling them to use administrative API permissions within a regular user session. With a CVSS score of 8.1, this vulnerability presents a high risk of unauthorized disclosure and modification of information. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.