CVE-2025-12854 newbee-mall-plus seckillExecution executeSeckill authorization

A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill of the file /seckillExecution/. The manipulation of the argument userid leads to authorization bypass. It is possible to initiate the attack remotely. The attack is considered to...

CVE-2025-12854

The CVE-2025-12854 issue affects newbee-mall-plus up to version 2.4.1, specifically the executeSeckill function in /seckillExecution/. Manipulating the userid parameter can bypass authorization, enabling remote exploitation. Documents indicate this is a network-accessible flaw with high complexit...

newbee-mall-plus 安全漏洞

newbee-mall-plus is an open source e-commerce system by newbee-ltd. A security vulnerability exists in newbee-mall-plus version 2.4.1 and earlier, which stems from incorrect manipulation of the parameter userid in the file /seckillExecution/, which could lead to authorization bypass...