CVE-2020-5590: Path Traversal
Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2020-5590.
What is the severity level of CVE-2020-5590?
The severity level of CVE-2020-5590 is high (8.1).
What is the affected software for CVE-2020-5590?
The affected software for CVE-2020-5590 is EC-CUBE versions 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3.
How can remote authenticated attackers exploit CVE-2020-5590?
Remote authenticated attackers can exploit CVE-2020-5590 to delete arbitrary files and/or directories on the server via unspecified vectors.
Are there any references available for CVE-2020-5590?
Yes, the references for CVE-2020-5590 are: - [JVN](https://jvn.jp/en/jp/JVN77458946/index.html) - [EC-CUBE Weakness Information](https://www.ec-cube.net/info/weakness/weakness.php?id=73) - [EC-CUBE Weakness Information](https://www.ec-cube.net/info/weakness/weakness.php?id=74)