Medium · 5.3 CVE-2023-27919 EUVD-2023-31645GHSA-v4hm-xqrg-4qfp

Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated…

Published May 10, 2023 · Updated Jan 27, 2025 · Assigned by jpcert

Vendor: NE Product: NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)

Description

Authentication bypass vulnerability in NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) all versions allows a remote unauthenticated attacker to alter the information stored in the system.

Affected products

Vendor	Product	Affected	Fixed
NE	NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)	all versions	—

References

https://main.next-engine.com/Usernotice/detail?id=1054
https://jvn.jp/en/jp/JVN50862842/