VULNERABILITY INTELLIGENCE

CVE-2018-5763

CVSS score5.9 MEDIUM
EPSS probability1.06%
CISA KEVNot currently listed
Published2018-02-19
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By entering specially crafted URLs, an attacker is able to bring the shop server to a standstill and hence, it stops working. This is only valid if OXID High Performance Option is activated and Varnish is used.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references