Description (CNA)
lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/Yllxx03/CVE/blob/main/lilishop/CouponLogicVulnerability.md
- https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50654
ADP enrichment
No English description supplied.
No references supplied.