CVE-2021-20842
1 advisory.
Packagist/ec-cube/ec-cube CVE-2021-20842: medium 6.5, EPSS 0.55%
EC-CUBE Cross-site request forgery (CSRF) vulnerability
Action: Upgrade ec-cube/ec-cube to 2.17.2 or later.
composer require ec-cube/ec-cube:2.17.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.11.0 | 2.17.2 | - |
Fixed versions
| 2.17.2 |
Sources
- osv: GHSA-m9hv-qmqh-33qh
- https://nvd.nist.gov/vuln/detail/CVE-2021-20842
- https://github.com/EC-CUBE/ec-cube
- https://jvn.jp/en/jp/JVN75444925/index.html
- https://www.ec-cube.net/info/weakness/20211111
CVE-2021-20842 · published · modified · JSON