Insecure Permissions in Newbee-Mall by Newbee Ltd
CVE-2023-30216

5.4MEDIUM

Key Information:

Vendor
Newbee-mall Project
Status
Newbee-mall
Vendor
CVE Published:
4 May 2023

Summary

The newbee-mall application by Newbee Ltd contains a vulnerability in the updateUserInfo function that allows unauthorized access to user account details due to improper handling of permissions. This flaw can potentially be exploited by attackers to gain sensitive user information, underscoring the need for prompt security measures and updates.

References

https://github.com/newbee-ltd/newbee-mall/issues/76

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-30216 : Insecure Permissions in Newbee-Mall by Newbee Ltd | SecurityVulnerability.io