CVE-2018-5763

An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By entering specially crafted URLs, an attacker is able to bring the shop server to a standstill and hence, it stops working. This is only valid if OXID High Performance Option is activated and Varnish is used.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cve@mitre.org

Published

2018-02-19

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Eshop (Oxid-esales)

References

• https://oxidforge.org/en/security-bulletin-2018-001.html