Lucene search

K
osvGoogleOSV:GHSA-4C39-HJ99-5H2R
HistoryMay 13, 2022 - 1:12 a.m.

OXID eShop user impersonation vulnerability

2022-05-1301:12:09
Google
osv.dev
10
openid
single sign-on
vulnerability
oxid eshop

EPSS

0.002

Percentile

55.3%

The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.

EPSS

0.002

Percentile

55.3%

Related for OSV:GHSA-4C39-HJ99-5H2R