CVE-2024-56526

An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-05-13

Last modified

2025-05-14

Weaknesses

CWE-200

Affected products

• Eshop (Oxid-esales)

References

• https://bugs.oxid-esales.com/view.php?id=7743