CVE-2024-50654
lilishop
Description d'origine
La description telle que publiée par la source (souvent en anglais).
lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.
Références
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com