Description
The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | oxid-esales/oxideshop-ce | < 4.5.0 | 4.5.0 | GHSA-4c39-hj99-5h2r |