CVE-2023-27919

Publication date

2023-05-10 00:00:00

Family

jpcert

State

PUBLISHED

Description

Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated attacker to alter the information stored in the system.