[GHSA-qqcr-9jfc-35c4] OXID eShop May Display User Information

[SvenBrunk]

Updates

• Affected products

Comments
The situation is a bit more complex than the mitre advisory suggests. The affected code was shipped with the core product with version 6 but moved to a component for version 7 where it is optional. It was never officially shipped with version 7 and that way needs to be installed manually and also can't be fixed by us by releasing a new version of the software.

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.

[SvenBrunk]

Since our customers need to ignore the audit message manually and tend to globally ignore the whole audit chain, it would be good if someone could have a look

[advisory-database]

Hi @SvenBrunk! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!