CVE-2020-23449

CVE-2020-23449 affects the NewBeeMall e-commerce system across all versions. The root cause is an incorrect access-control mechanism in the component NewBeeMallIndexConfigServiceImpl.java, which can remotely enable privilege escalation and allow unauthorized changes to any user information via us...