CVE-2024-50653
CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a l…
Published: 2024-11-15 · CVSS: 7.5 · CVSS 3.1
CRMEB <=5.4.0 is vulnerable to Incorrect Access Control. Users can bypass the front-end restriction of only being able to claim coupons once by capturing packets and sending a large number of data packets for coupon collection, achieving unlimited coupon collection.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7