Description
An issue was discovered in OXID eShop before 7. CMS pages in combination with Smarty may display user information if a CMS page contains a Smarty syntax error.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | oxid-esales/oxideshop-ce | >= 6.0.0, < 6.14.4 | 6.14.4 | GHSA-qqcr-9jfc-35c4 |
| Packagist | oxid-esales/oxideshop-metapackage-ce | >= 6.0.0, < 6.5.5 | 6.5.5 | GHSA-qqcr-9jfc-35c4 |
| Packagist | oxid-esales/smarty-component | < 1.0.1 | 1.0.1 | GHSA-qqcr-9jfc-35c4 |