Cross-site request forgery (CSRF) vulnerability in Easy Blog for EC-CUBE4 Ver.1.0.1 and earlier allows a remote unauthenticated attacker to hijack the authentication of the administrator and delete a blog article or a category via a specially crafted page.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN46241173/index.html | Third Party Advisory VDB Entry |
| https://www.ec-cube.net/products/detail.php?product_id=2217 | Product Vendor Advisory |
| https://jvn.jp/en/jp/JVN46241173/index.html | Third Party Advisory VDB Entry |
| https://www.ec-cube.net/products/detail.php?product_id=2217 | Product Vendor Advisory |
Configurations
History
21 Nov 2024, 06:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jvn.jp/en/jp/JVN46241173/index.html - Third Party Advisory, VDB Entry | |
| References | () https://www.ec-cube.net/products/detail.php?product_id=2217 - Product, Vendor Advisory |
22 Jun 2022, 16:12
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-352 | |
| CPE | cpe:2.3:a:easy_blog_project:easy_blog:*:*:*:*:*:ec-cube4:*:* | |
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 4.3 |
| References | (MISC) https://jvn.jp/en/jp/JVN46241173/index.html - Third Party Advisory, VDB Entry | |
| References | (MISC) https://www.ec-cube.net/products/detail.php?product_id=2217 - Product, Vendor Advisory |
13 Jun 2022, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-06-13 05:15
Updated : 2024-11-21 06:55
NVD link : CVE-2022-27174
Mitre link : CVE-2022-27174
CVE.ORG link : CVE-2022-27174
JSON object : View
Products Affected
easy_blog_project
- easy_blog
CWE
CWE-352
Cross-Site Request Forgery (CSRF)