CVE-2021-20841
CVE-2021-20841
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors.
CVSS 6.5 · Medium · EPSS 1.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
ec-cube 2 series
- Versions
- 2.11.2 to 2.17.1: Affected
No fix published
ec-cube/ec-cube Packagist
- Affected ranges
- ECOSYSTEM: ≥ 2.11.2, < 2.17.2
Update to 2.17.2