CVE-2024-41924

Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series

High · published July 30, 2024

CVSS v3.1
7.2
EPSS
0%
Percentile
17.8
In the wild
Unconfirmed
What it is

Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series. If this vulnerability is exploited, an attacker who obtained the administrative privilege may install an arbitrary PHP package. If the obsolete versions of PHP packages are installed, the product may be affected by some known vulnerabilities.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00267 · 17.8th percentile
Published
2024-07-30T08:45Z
EPSS history
Timeline
  • 30 JUL 08:45Z
    Acceptance of extraneous untrusted data with trusted data vulnerability exists in EC-CUBE 4 series
    cvelistv5