Skip to content
OpenAdvisories
Unscored CVE-2020-23449 EUVD-2020-16196GHSA-9fg6-4jc3-m2x8

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java…

Published Jan 26, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized changes can be made to any user information through the userID.

References