CVE-2020-5680 - Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector

Back Back to CVE browser

HIGH

Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector

Published Dec 3, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.38%

Description

Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector.

Affected products

Vendor EC-Cube Co.,ltd. Product EC-Cube Default
n/a
- Version
  versions from 3.0.5 to 3.0.18
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

EC-Cube Co.,ltd.

EC-Cube

n/a

Version	Status	Constraints
versions from 3.0.5 to 3.0.18	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-2871
Advisory
https://github.com/advisories/GHSA-6wm9-966m-73jr
Advisory
https://jvn.jp/en/jp/JVN24457594/index.html
x_refsource_MISCThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-5680
https://www.ec-cube.net/info/weakness
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-2871		Advisory
https://github.com/advisories/GHSA-6wm9-966m-73jr		Advisory
https://jvn.jp/en/jp/JVN24457594/index.html		x_refsource_MISCThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-5680
https://www.ec-cube.net/info/weakness		x_refsource_MISCVendor Advisory