CVE-2024-50654

High

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by…

mitre·NVD-CWE-noinfo·Published 2024-11-15

CVSS

7.5

EPSS

0.02

KEV

Exploits

cve.orgen

214 chars

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.

NVDen

214 chars

NVDes

247 chars

lilishop <=4.2.4 es vulnerable a un control de acceso incorrecto, que puede permitir a los atacantes obtener cupones más allá del límite de cantidad al capturar y enviar los paquetes de datos para la recolección de cupones en alta concurrencia.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
3.1	Secondary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N