{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"3.0.5","last_affected":"3.0.18"}],"component":"ec-cube/ec-cube","cve_ids":["CVE-2020-5680"],"ecosystem":"Packagist","epss":0.01384,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6wm9-966m-73jr","id":"tcs_01M5KEXFBB4VEK092BC5BPMSZM","modified_at":"2024-04-25T20:57:37.020341Z","published_at":"2022-05-24T17:35:20Z","references":["https://osv.dev/vulnerability/GHSA-6wm9-966m-73jr","https://nvd.nist.gov/vuln/detail/CVE-2020-5680","https://github.com/EC-CUBE/ec-cube","https://jvn.jp/en/jp/JVN24457594/index.html","https://www.ec-cube.net/info/weakness"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6wm9-966m-73jr","url":"https://osv.dev/vulnerability/GHSA-6wm9-966m-73jr"}],"summary":"EC-CUBE Improper input validation vulnerability"}