Vulnerabilities > CVE-2020-23449 - Authorization Bypass Through User-Controlled Key vulnerability in Newbee-Mall Project Newbee-Mall
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized changes can be made to any user information through the userID.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |