Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wrr5-xwcp-mrf2

Опубликовано: 15 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.

EPSS

Процентиль: 43%
0.00205
Низкий

7.5 High

CVSS3

Дефекты

CWE-346

Связанные уязвимости

CVSS3: 7.5
nvd
около 1 года назад

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.

EPSS

Процентиль: 43%
0.00205
Низкий

7.5 High

CVSS3

Дефекты

CWE-346