Feed/CVE-2024-56526
CVE-2024-56526HIGHCVSS 7.5

OXID eShop May Display User Information

Published May 13, 2025·Updated Jul 30, 2026

NVD Description

An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error.

Affected Packages (3)

oxid-esales/smarty-componentCOMPOSER
Fixed in 1.0.1
oxid-esales/oxideshop-metapackage-ceCOMPOSER
From 6.0.0
Fixed in 6.5.5
oxid-esales/oxideshop-ceCOMPOSER
From 6.0.0
Fixed in 6.14.4

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free