CVE-2020-5679

2020-12-0312:15:11

Google

osv.dev

ec-cube

ui restriction

clickjacking

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

36.1%

JSON

Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.