Packagist/ec-cube/ec-cube: medium 6.7
EC-CUBE has a Vulnerability that Allows MFA Bypass in the Administrative Interface
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.1.0 | - | 4.3.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7rhv-h82h-vpjh
- https://github.com/EC-CUBE/ec-cube/security/advisories/GHSA-7rhv-h82h-vpjh
- https://github.com/EC-CUBE/ec-cube/commit/094785943bfc3815c29f0cce9dbabb9bcc688474
- https://github.com/EC-CUBE/ec-cube
published · modified · JSON