CVE-2013-5993: CSRF
Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.0 allows remote attackers to hijack the authentication of arbitrary users via unspecified vectors related to refusals.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5993?
CVE-2013-5993 is classified as a medium severity vulnerability due to its potential to compromise user authentication.
How do I fix CVE-2013-5993?
To fix CVE-2013-5993, update LOCKON EC-CUBE to version 2.13.1 or later, which addresses this CSRF vulnerability.
What types of attacks can be executed using CVE-2013-5993?
CVE-2013-5993 can allow attackers to perform cross-site request forgery attacks, potentially hijacking user sessions.
Which versions of LOCKON EC-CUBE are affected by CVE-2013-5993?
CVE-2013-5993 affects LOCKON EC-CUBE versions 2.11.0 through 2.13.0.
Is there a workaround for CVE-2013-5993 if I cannot update immediately?
As an immediate precaution, ensure that users are authenticated via secure tokens to mitigate the risk of CSRF attacks until an upgrade can be performed.