exploitDog

CVE-2024-50653

Опубликовано: 15 нояб. 2024

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a large number of data packets for coupon collection, achieving unlimited coupon collection.

Ссылки

https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50653
Exploit
Third Party Advisory
https://github.com/crmeb
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:crmeb:crmeb:*:*:*:*:*:*:*:*

Версия до 5.4.0 (включая)

EPSS

Процентиль: 30%

0.0011

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-284

Связанные уязвимости

GHSA-f927-34r4-vxxw

CVSS3: 7.5

github

около 1 года назад

CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a large number of data packets for coupon collection, achieving unlimited coupon collection.

EPSS

Процентиль: 30%

0.0011

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-284