CVE-2018-12579

CVE-2018-12579 is a high-severity vulnerability affecting OXID eShop Enterprise, Professional, and Community Editions across multiple versions. It allows an attacker to gain unauthorized access to the admin panel or a customer account by exploiting a flaw in the password reset function. This attack requires the attacker to own a domain name similar to the victim's email domain, making it a high complexity attack with high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.