提交 #640785: Smartstore AG Smartstore 6.2.0 Race Condition信息
标题
Smartstore AG Smartstore 6.2.0 Race Condition
描述
A race condition vulnerability was discovered in the gift voucher redemption process of smartstore/Smartstore. The flaw allows multiple distinct users or guests to redeem the same voucher concurrently via /checkout/confirm/. This can enable attackers with guest sessions or multiple accounts to redeem a single voucher multiple times across different accounts, potentially resulting in unauthorized financial gain.