CVE-2022-40199

🗓️ 27 Sep 2022 01:55:17Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 54 Views

Directory traversal vuln in EC-CUBE 3 & 4 series allows authenticated attacker to obtain directory structure info

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-40199	28 Sep 202202:36	–	circl
CNNVD	EC-CUBE 路径遍历漏洞	15 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-40199	27 Sep 202201:55	–	cvelist
EUVD	EUVD-2022-6963	3 Oct 202520:07	–	euvd
Github Security Blog	EC-CUBE Directory traversal vulnerability	28 Sep 202200:00	–	github
Japan Vulnerability Notes	JVN#21213852: Multiple vulnerabilities in EC-CUBE	15 Sep 202200:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in EC-CUBE	15 Sep 202207:30	–	jvn
NVD	CVE-2022-40199	27 Sep 202223:15	–	nvd
OSV	GHSA-WJPV-FRF2-3R58 EC-CUBE Directory traversal vulnerability	28 Sep 202200:00	–	osv
Prion	Directory traversal	27 Sep 202223:15	–	prion

NVD

Node

ec-cube ec-cubeRange3.0.0–3.0.18

ec-cube ec-cubeRange4.0.0–4.1.2

ec-cube ec-cubeMatch3.0.18-

ec-cube ec-cubeMatch3.0.18p1

ec-cube ec-cubeMatch3.0.18p2

ec-cube ec-cubeMatch3.0.18p3

ec-cube ec-cubeMatch3.0.18p4

[
  {
    "product": "EC-CUBE 3 series and EC-CUBE 4 series",
    "vendor": "EC-CUBE CO.,LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "EC-CUBE 3.0.0 to 3.0.18-p4 and EC-CUBE 4.0.0 to 4.1.2"
      }
    ]
  }
]