| tiêu đề | linlinjava litemall 1.8.0 Improper Restriction of Write-Once Bit Fields |
|---|
| Mô tả | Litemall is an e-commerce application built with Spring-boot. In the current open source version, there is a Mass Assignment Vulnerability int the /wx/comment/post endpoint. This endpoint allows attackers to set the adminContent field, enabling them to forge administrator comments, which could potentially lead to social engineering attacks such as misleading users, publishing fake promotions/scams, and spreading malicious links and viruses. |
|---|
| Nguồn | ⚠️ https://ctf-n0el4kls.notion.site/Litemall-Mass-Assignment-Vulnerability-in-wx-comment-post-21441990f447808b86d1cb15e37ecae9?source=copy_link |
|---|
| Người dùng | n0el4kls (UID 80089) |
|---|
| Đệ trình | 16/06/2025 06:27 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 26/06/2025 10:22 (10 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 313968 [linlinjava litemall 1.8.0 /wx/comment/post adminComment nâng cao đặc quyền] |
|---|
| điểm | 17 |
|---|