Lucene search

K
osvGoogleOSV:GHSA-JC55-CRG7-PR35
HistoryNov 25, 2021 - 12:00 a.m.

EC-CUBE Improper access control in Management screen

2021-11-2500:00:38
Google
osv.dev
6
ec-cube
access control
management screen
remote attacker
access restriction
system settings
software

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

39.5%

Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors.

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

39.5%

Related for OSV:GHSA-JC55-CRG7-PR35