CVE-2022-30929

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...

CVE-2022-30929

CVE-2022-30929 affects Mini-Tmall v1.0 and is described as vulnerable to insecure permissions via the Tomcat Jasper embedding component (tomcat-embed-jasper). Several connected sources reiterate an insecure privilege/permission issue, including Red Hat and CNNVD entries, which label it as an inse...

CVE-2022-30929: Incorrect Permission Assignment for Critical Resource

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...

Mini-Tmall 安全漏洞

Mini-Tmall is a Spring Boot-based mini-Tmall mall , fast deployment run , suitable for use as a Bijou template . A security vulnerability exists in Mini-Tmall v1.0. An attacker exploits the vulnerability to perform an insecure privilege attack via tomcat-embed-jasper...

PT-2022-20389

Name of the Vulnerable Software and Affected Versions Mini-Tmall version 1.0 Description The issue is related to Insecure Permissions via tomcat-embed-jasper. Recommendations For Mini-Tmall version 1.0, consider restricting access to the tomcat-embed-jasper component until a patch is available. A...

SQL Injection Vulnerability in Mini-Tmall Framework Front and Backend

Mini Tmall Mini Tmall is a Spring Boot-based integrated B2C e-commerce platform, the requirements of the design of the main reference Tmall shopping process: users start from registration, to complete the login, browse the products, add a shopping cart, place an order, confirm receipt, evaluation...