Packagist/ec-cube/ec-cube CVE-2021-20841: medium 6.5, EPSS 1.32%

EC-CUBE Improper access control in Management screen

Action: Upgrade ec-cube/ec-cube to 2.17.2 or later.

composer require ec-cube/ec-cube:2.17.2

Affected

Fixed versions

Sources

• osv: GHSA-jc55-crg7-pr35
• https://nvd.nist.gov/vuln/detail/CVE-2021-20841
• https://github.com/EC-CUBE/ec-cube
• https://jvn.jp/en/jp/JVN75444925/index.html
• https://www.ec-cube.net/info/weakness/20211111

CVE-2021-20841 · published 2021-11-25T00:00:38Z · modified 2024-04-25T20:57:37.325213Z · JSON