CVE-2020-5680: Input Validation
Published Dec 3, 2020
·Updated
Improper input validation vulnerability in EC-CUBE versions from 3.0.5 to 3.0.18 allows a remote attacker to cause a denial-of-service (DoS) condition via unspecified vector.
Affected Software
2 affected components
composer/ec-cube/ec-cube>=3.0.5<=3.0.18
EC-CUBE EC-CUBE>=3.0.5<=3.0.18
Event History
Dec 3, 2020
CVE Published
via MITRE·11:15 AM
Data Sourced
via MITRE·11:15 AM
DescriptionWeakness
May 24, 2022
Advisory Published
via GitHub·05:35 PM
Frequently Asked Questions
1
What is the vulnerability ID for this EC-CUBE vulnerability?
The vulnerability ID for this EC-CUBE vulnerability is CVE-2020-5680.
2
What is the severity level of CVE-2020-5680?
The severity level of CVE-2020-5680 is high with a CVSS score of 7.5.
3
What is the affected software for CVE-2020-5680?
The affected software for CVE-2020-5680 is EC-CUBE versions from 3.0.5 to 3.0.18.
4
How does CVE-2020-5680 affect EC-CUBE?
CVE-2020-5680 allows a remote attacker to cause a denial-of-service (DoS) condition in EC-CUBE.
5
Are there any references available for CVE-2020-5680?
Yes, you can find references for CVE-2020-5680 at the following URLs: [https://jvn.jp/en/jp/JVN24457594/index.html](https://jvn.jp/en/jp/JVN24457594/index.html) and [https://www.ec-cube.net/info/weakness/](https://www.ec-cube.net/info/weakness/)