| 标题 | newbee-ltd newbee-mall a069069b07027613bf0e7f571736be86f431faee Improper Validation of Specified Quantity in Input |
|---|
| 描述 | newbee-ltd newbee-mall contains an improper validation of specified quantity vulnerability in the shopping cart and order-processing logic. An authenticated member can submit a negative goodsCount value through the shopping cart add or update functionality because the server enforces only an upper quantity limit and does not verify that the quantity is positive. The negative value is stored and later used directly when calculating the order total and updating product stock. As a result, a negative cart line can offset the price of legitimate positive-quantity items, reducing the persisted order total, while the stock update calculation increases the affected product's stock instead of decreasing it. In the verified proof of concept, an order containing a positive line worth 500 and a negative line worth -415 was persisted with a total price of 85, and the targeted product stock increased from 998 to 1003. The issue was reproduced at commit a069069b07027613bf0e7f571736be86f431faee.
The issue has been reported to the upstream maintainers via GitHub Issue; no maintainer response has been received to date. |
|---|
| 来源 | ⚠️ https://github.com/newbee-ltd/newbee-mall/issues/127 |
|---|
| 用户 | cztang (UID 101252) |
|---|
| 提交 | 2026-09-18 04時01分 (18 日前) |
|---|
| 管理 | 2026-10-05 18時11分 (18 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 413632 [newbee-ltd newbee-mall 直到 2.7.5 Shopping Cart Quantity updateAccountHeadAndDetail goodsCount] |
|---|
| 积分 | 20 |
|---|