CVE-2026-103671 — 脆弱性インテリジェンス

—

公表日: 2026-10-14T09:17:22.030

CVSS

5.3

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitrary website during the ordering process. As a result, user's account information may be obtained.

情報源

• CVE-2026-103671
• Original advisory
• Original advisory