Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated attacker to alter the information stored in the system.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN50862842/ | Third Party Advisory |
| https://main.next-engine.com/Usernotice/detail?id=1054 | Permissions Required |
| https://jvn.jp/en/jp/JVN50862842/ | Third Party Advisory |
| https://main.next-engine.com/Usernotice/detail?id=1054 | Permissions Required |
Configurations
History
21 Nov 2024, 07:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jvn.jp/en/jp/JVN50862842/ - Third Party Advisory | |
| References | () https://main.next-engine.com/Usernotice/detail?id=1054 - Permissions Required |
17 May 2023, 16:34
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-287 | |
| CPE | cpe:2.3:a:next-engine:next_engine_integration:*:*:*:*:*:ec-cube:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| References | (MISC) https://jvn.jp/en/jp/JVN50862842/ - Third Party Advisory | |
| References | (MISC) https://main.next-engine.com/Usernotice/detail?id=1054 - Permissions Required |
10 May 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-10 06:15
Updated : 2025-01-27 21:15
NVD link : CVE-2023-27919
Mitre link : CVE-2023-27919
CVE.ORG link : CVE-2023-27919
JSON object : View
Products Affected
next-engine
- next_engine_integration
CWE
CWE-287
Improper Authentication