CVE-2022-21179

CVE-2022-21179: falha em EC-CUBE plugin 'Mail Magazine Management Plugin'

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar EC-CUBE plugin 'Mail Magazine Management Plugin'

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.5%
Cross-site request forgery (CSRF) vulnerability in EC-CUBE plugin 'Mail Magazine Management Plugin' ver4.0.0 to 4.1.1 (for EC-CUBE 4 series) and ver1.0.0 to 1.0.4 (for EC-CUBE 3 series) allows a remote unauthenticated attacker to hijack the authentication of an administrator via a specially crafted page, and Mail Magazine Templates and/or transmitted history information may be deleted unintendedly.
Produtos afetados
EC-CUBE CO.,LTD. · EC-CUBE plugin 'Mail Magazine Management Plugin'