CVE-2022-40199

CVE-2022-40199 is a directory traversal vulnerability affecting EC-CUBE 3 series (3.0.0 to 3.0.18-p4) and EC-CUBE 4 series (4.0.0 to 4.1.2). This flaw allows a remote authenticated attacker with administrative privileges to gain information about the product's directory structure. Rated as LOW severity (CVSS 2.7), it requires high privileges and has a low impact, primarily disclosing sensitive information without affecting integrity or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting it is not currently a high-priority threat.