← Database

CVE-2024-50654

HIGH CVSS: 7.5 Published: 2024-11-15 Modified: 2026-06-17

Description

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.

Affected Platforms

Pickmall Lilishop

Weakness Type

NVD-CWE-noinfo, CWE-346

References