| Título | Smartstore AG Smartstore 6.2.0 Race Condition |
|---|
| Descrição | A race condition vulnerability was discovered in the gift voucher redemption process of smartstore/Smartstore. The flaw allows multiple distinct users or guests to redeem the same voucher concurrently via /checkout/confirm/. This can enable attackers with guest sessions or multiple accounts to redeem a single voucher multiple times across different accounts, potentially resulting in unauthorized financial gain. |
|---|
| Utilizador | kkc73 (UID 89422) |
|---|
| Submissão | 24/08/2025 08h44 (há 11 meses) |
|---|
| Moderação | 21/09/2025 10h48 (28 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 325134 [Smartstore até 6.2.0 Gift Voucher /checkout/confirm/ Condição de Corrida] |
|---|
| Pontos | 16 |
|---|