High · 7.5 CVE-2024-50654 EUVD-2024-44990GHSA-wrr5-xwcp-mrf2

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by captur…

Published Nov 15, 2024 · Updated Nov 21, 2024 · Assigned by mitre

Description

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.

References

https://github.com/Yllxx03/CVE/blob/main/lilishop/CouponLogicVulnerability.md
https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50654