CVE-2022-40199: Path Traversal
Directory traversal vulnerability in EC-CUBE 3 series (EC-CUBE 3.0.0 to 3.0.18-p4 ) and EC-CUBE 4 series (EC-CUBE 4.0.0 to 4.1.2) allows a remote authenticated attacker with an administrative privilege to obtain the product's directory structure information.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this directory traversal vulnerability?
The vulnerability ID for this directory traversal vulnerability is CVE-2022-40199.
What software is affected by this vulnerability?
The EC-CUBE 3 series (version 3.0.0 to 3.0.18-p4) and EC-CUBE 4 series (version 4.0.0 to 4.1.2) are affected by this vulnerability.
What is the severity of CVE-2022-40199?
The severity of CVE-2022-40199 is low, with a severity value of 2.7.
How does this vulnerability allow an attacker to obtain the product's directory structure information?
This vulnerability allows a remote authenticated attacker with an administrative privilege to obtain the product's directory structure information.
How can I fix CVE-2022-40199?
To fix CVE-2022-40199, it is recommended to update EC-CUBE to the latest version available, which includes a patch for this vulnerability.