High severity8.1NVD Advisory· Published Aug 20, 2018· Updated Jun 17, 2026
CVE-2018-12579
CVE-2018-12579
Description
An issue was discovered in OXID eShop Enterprise Edition before 5.3.8, 6.0.x before 6.0.3, and 6.1.x before 6.1.0; Professional Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0; and Community Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0. An attacker could gain access to the admin panel or a customer account when using the password reset function. To do so, it is required to own a domain name similar to the one the victim uses for their e-mail accounts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23cpe:2.3:a:oxid-esales:eshop:*:*:*:*:community:*:*:*+ 21 more
- cpe:2.3:a:oxid-esales:eshop:*:*:*:*:community:*:*:*range: <=4.10.7
- cpe:2.3:a:oxid-esales:eshop:*:*:*:*:enterprise:*:*:*range: <=5.3.7
- cpe:2.3:a:oxid-esales:eshop:*:*:*:*:professional:*:*:*range: <=4.10.7
- cpe:2.3:a:oxid-esales:eshop:6.0.0:beta1:*:*:community:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:beta1:*:*:enterprise:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:beta1:*:*:professional:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:beta2:*:*:community:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:beta2:*:*:enterprise:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:beta2:*:*:professional:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:beta3:*:*:community:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:beta3:*:*:enterprise:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:beta3:*:*:professional:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:rc1:*:*:community:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:rc1:*:*:enterprise:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:rc1:*:*:professional:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:rc2:*:*:community:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:rc2:*:*:enterprise:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.0:rc2:*:*:professional:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.2:*:*:*:community:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.2:*:*:*:enterprise:*:*:*
- cpe:2.3:a:oxid-esales:eshop:6.0.2:*:*:*:professional:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
2- oxidforge.org/en/security-bulletin-2018-002.htmlnvdPatchThird Party Advisory
- bugs.oxid-esales.com/view.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.