GHSA-rwh8-h525-4jvj
EC-CUBE Improper Restriction of Rendered UI Layers or Frames
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | ec-cube/ec-cube | >= 3.0.0, <= 3.0.18 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Improper restriction of rendered UI layers or frames in EC-CUBE versions from 3.0.0 to 3.0.18 leads to clickjacking attacks. If a user accesses a specially crafted page while logged into the administrative page, unintended operations may be conducted.
References
External links from the advisory. They lead to third-party sites.