CVE-2024-56526
An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error.
- Actualiza a 6.14.4
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades publicadas para oxid-esales/oxideshop-ce en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 2
An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error.
The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.