Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f927-34r4-vxxw

Опубликовано: 15 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a large number of data packets for coupon collection, achieving unlimited coupon collection.

CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a large number of data packets for coupon collection, achieving unlimited coupon collection.

EPSS

Процентиль: 30%
0.0011
Низкий

7.5 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 7.5
nvd
около 1 года назад

CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a large number of data packets for coupon collection, achieving unlimited coupon collection.

EPSS

Процентиль: 30%
0.0011
Низкий

7.5 High

CVSS3

Дефекты

CWE-284