medium5.9
CVE-2018-5763
An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1.
Impact
An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By entering specially crafted URLs, an attacker is able to bring the shop server to a standstill and hence, it stops working. This is only valid if OXID High Performance Option is activated and Varnish is used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oxid-Esales | Eshop | before 5.3.7 Version 6.0.0 |