Newbee Mall Plus Authorization Bypass Vulnerability Allowing Unauthorized Purchases

An authorization bypass vulnerability has been identified in Newbee Mall Plus versions through 2.4.1. The issue arises in the 'executeSeckill' function within the '/seckillExecution/' endpoint, where the 'userid' parameter is not properly validated. This lack of validation allows attackers to manipulate the 'userid' value and perform actions on behalf of other users, leading to unauthorized order creation. The vulnerability can be exploited remotely and is considered to have high complexity, although a public exploit is available.

Impact

Exploitation of this vulnerability allows for unauthorized order creation on behalf of other users, potentially leading to abuse of user accounts.

Reproduction

To reproduce this vulnerability, send a POST request to the '/seckillExecution/' endpoint with a modified 'userid' parameter. The request will be processed without proper authorization checks, allowing the creation of orders as if they were made by the user associated with the 'userid' value.