En resumen
- CVE-2015-6926 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a oxid-esales/oxideshop-ce, eshop (oxid-esales).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 64.9% de las vulnerabilidades.
- Solución: actualizar a 4.5.0 o posterior.
Description
The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.
NVD description
The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.
Más vulnerabilidades de oxid-esales/oxideshop-ce
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free