GHSA-rwh8-h525-4jvjMediumCVSS 6.1

EC-CUBE Improper Restriction of Rendered UI Layers or Frames

Published
May 24, 2022
Last Modified
April 25, 2024

🔗 CVE IDs covered (1)

CVE-2020-5679 →

📋 Description

Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.

🎯 Affected products1

  • composer/ec-cube/ec-cube:>= 3.0.0, <= 3.0.18

🔗 References (4)