| 标题 | OpenCart 4.1.0.3 Time-of-check Time-of-use |
|---|
| 描述 | Unauthenticated TOCTOU Race Condition in OpenCart Checkout allows attackers to bypass business logic, leading to financial loss and inventory corruption. Concurrent requests can successfully apply single-use coupons multiple times (bypassing limits) and simultaneously deduct stock from products, causing negative inventory levels (overselling). This is exploitable via Guest Checkout (PR:N). |
|---|
| 来源 | ⚠️ https://gist.github.com/KhanMarshaI/a55f125a55de1c0d4f41e66236027e01 |
|---|
| 用户 | KhanMarshal (UID 89610) |
|---|
| 提交 | 2025-12-10 11時28分 (9 月前) |
|---|
| 管理 | 2025-12-27 09時41分 (17 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 338494 [OpenCart 直到 4.1.0.3 Single-Use Coupon 竞争条件] |
|---|
| 积分 | 19 |
|---|