CVE-2021-20778

概要

参考情報

• jvn.jp/en/jp/JVN57942445/index.html · Third Party Advisory
• jvn.jp/en/jp/JVN57942445/index.html · Third Party Advisory
• ec-cube.net/info/weakness/weakness.php · Patch

ec-cube のその他の脆弱性

• CVE-2026-30777中 6.5EC-CUBE provided by EC-CUBE CO.,LTD. contains a multi-factor authentication (MFA) bypass vulnerability. An attacker who has obtained a valid…
• CVE-2023-46845高 7.2EC-CUBE 3 series (3.0.0 to 3.0.18-p6) and 4 series (4.0.0 to 4.0.6-p3, 4.1.0 to 4.1.2-p2, and 4.2.0 to 4.2.2) contain an arbitrary code exec…
• CVE-2023-40281中 4.8EC-CUBE 2.11.0 to 2.17.2-p1 contain a cross-site scripting vulnerability in "mail/template" and "products/product" of Management page. If t…
• CVE-2023-25077中 5.4Cross-site scripting vulnerability in Authentication Key Settings of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1, and EC-CUBE 4.2.0…
• CVE-2023-22838中 5.4Cross-site scripting vulnerability in Product List Screen and Product Detail Screen of EC-CUBE 4.0.0 to 4.0.6-p2, EC-CUBE 4.1.0 to 4.1.2-p1,…