p PatchFirst

CVE-2020-5680

CVE-2020-5680

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector.

CVSS 7.5 · High · EPSS 1.4%

Published
Updated

Stack: php

Affected products and versions

  • ec-cube

    Versions
    • versions from 3.0.5 to 3.0.18: Affected

    No fix published

  • ec-cube/ec-cube Packagist

    Versions
    • 3.0.10
    • 3.0.11
    • 3.0.11-RC
    • 3.0.12
    • 3.0.12-p1
    • 3.0.13
    • 3.0.14
    • 3.0.15
    • 3.0.16
    • 3.0.17
    • 3.0.18
    • 3.0.5
    • 3.0.6
    • 3.0.7
    • 3.0.8
    • 3.0.9
    Affected ranges
    • ECOSYSTEM: ≥ 3.0.5, ≤ 3.0.18

    No fix published

Original sources

Check your server →