CVEvulnerability
CVE-2014-4919
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-01-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-264
Description
OXID eShop Professional Edition before 4.7.13 and 4.8.x before 4.8.7, Enterprise Edition before 5.0.13 and 5.1.x before 5.1.7, and Community Edition before 4.7.13 and 4.8.x before 4.8.7 allow remote attackers to assign users to arbitrary dynamical user groups.
Affected configurations
• oxid-esales eshop (< 4.7.13)
• oxid-esales eshop (>= 4.8.0 < 4.8.7)
• oxid-esales eshop (< 5.0.13)
• oxid-esales eshop (>= 5.1.0 < 5.1.7)
Related
Weakness · not in database (1)
References
- https://bugs.oxid-esales.com/view.php?id=5814 Issue Tracking, Vendor Advisory
- https://oxidforge.org/en/security-bulletin-2014-003.html Mitigation, Vendor Advisory
- https://bugs.oxid-esales.com/view.php?id=5814 Issue Tracking, Vendor Advisory
- https://oxidforge.org/en/security-bulletin-2014-003.html Mitigation, Vendor Advisory