CVE-2024-50654

Published: Nov 15, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

lilishop <=4.2.4 is vulnerable to Incorrect Access Control, which can allow attackers to obtain coupons beyond the quantity limit by capturing and sending the data packets for coupon collection in high concurrency.

Affected (1)

Products: Pickmall: Lilishop

Pickmall

1 product

Lilishop

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Pickmall Lilishop	Up to 4.2.4

Related CWEs

CWE-346

Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

References (2)

https://github.com/Yllxx03/CVE/blob/main/lilishop/CouponLogicVulnerability.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/Yllxx03/CVE/tree/main/CVE-2024-50654

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.