CVE-2020-23449

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized changes can be made to any user information through the userID...

PT-2021-10899

Name of the Vulnerable Software and Affected Versions newbee-mall versions all Description The issue allows for incorrect access control, enabling remote privilege escalation. This can be achieved through the NewBeeMallIndexConfigServiceImpl.java. An attacker can make unauthorized changes to any...

newbee-mall 访问控制错误漏洞

newbee-mall is an e-commerce system. An access control error vulnerability exists in all versions of newbee-mall, where an attacker cannot remotely gain privileges via NewBeeMallIndexConfigServiceImpl. java, but can make unauthorized changes to any user information via userID...