| 标题 | Smartstore AG Smartstore 6.2.0 Race Condition |
|---|
| 描述 | A race condition vulnerability was discovered in the gift voucher redemption process of smartstore/Smartstore. The flaw allows multiple distinct users or guests to redeem the same voucher concurrently via /checkout/confirm/. This can enable attackers with guest sessions or multiple accounts to redeem a single voucher multiple times across different accounts, potentially resulting in unauthorized financial gain. |
|---|
| 用户 | kkc73 (UID 89422) |
|---|
| 提交 | 2025-08-24 08時44分 (11 月前) |
|---|
| 管理 | 2025-09-21 10時48分 (28 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 325134 [Smartstore 直到 6.2.0 Gift Voucher /checkout/confirm/ 竞争条件] |
|---|
| 积分 | 16 |
|---|