CVEvulnerability
CVE-2024-50654
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-11-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-346
Description
lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.
Affected configurations
• pickmall lilishop (<= 4.2.4)
Related
Weakness · CWE (1)
- CWE-346 Origin Validation Error weakness
References
- https://github.com/Yllxx03/CVE/blob/main/lilishop/CouponLogicVulnerability.md Exploit, Third Party Advisory
- https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50654 Exploit, Third Party Advisory