CVE-2023-30216

The CVE-2023-30216 entry affects the open-source e-commerce system newbee-mall prior to commit 1f2c2dfy, where the updateUserInfo function has insecure permissions. This configuration flaw allows attackers to obtain user account information, as described across multiple sources. Root cause: impro...

PT-2023-22592 · Unknown · Newbee-Mall

Name of the Vulnerable Software and Affected Versions: newbee-mall versions prior to commit 1f2c2dfy Description: The issue is related to insecure permissions in the updateUserInfo function, which allows attackers to obtain user account information. Recommendations: For versions prior to commit...

newbee-mall 安全漏洞

newbee-mall is an e-commerce system. A security vulnerability exists in previous versions of newbee-mall 1f2c2dfy, which stems from an insecure privilege setting in the updateUserInfo function and can be exploited by an attacker to obtain user account information...