CVE-2024-50654
lilishop
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com