VYPR
← All advisories
Medium severity4.9NVD Advisory· Published May 13, 2025· Updated Jun 17, 2026

CVE-2024-56526

CVE-2024-56526

Description

An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
oxid-esales/oxideshop-cePackagist
>= 6.0.0, < 6.14.46.14.4
oxid-esales/oxideshop-metapackage-cePackagist
>= 6.0.0, < 6.5.56.5.5
oxid-esales/smarty-componentPackagist
< 1.0.11.0.1

Affected products

4
  • Oxid/Eshop3 versions
    cpe:2.3:a:oxid-esales:eshop:*:*:*:*:community:*:*:*+ 2 more
    • cpe:2.3:a:oxid-esales:eshop:*:*:*:*:community:*:*:*range: <=7.0.5
    • cpe:2.3:a:oxid-esales:eshop:*:*:*:*:enterprise:*:*:*range: <=7.0.5
    • (no CPE)
  • ghsa-coords
    pkg:composer/oxid-esales/oxideshop-ce
    Range: <= 7.0.5

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.