Denial-of-Service Vulnerability in EC-CUBE by EC-CUBE Co. Ltd.

CVE-2020-5680

What is CVE-2020-5680?

An improper input validation vulnerability exists in EC-CUBE versions 3.0.5 to 3.0.18, which allows a remote attacker to exploit the system and potentially trigger a denial-of-service (DoS) condition. Attackers can utilize this flaw through unspecified vectors, resulting in service disruptions and making the affected system unavailable to legitimate users.

References