CVE-2020-5679

2020-12-0311:15:32

jpcert

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

JSON

Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.

CNA Affected

[
  {
    "product": "EC-CUBE",
    "vendor": "EC-CUBE CO.,LTD.",
    "versions": [
      {
        "status": "affected",
        "version": "versions from 3.0.0 to 3.0.18"
      }
    ]
  }
]