CVE-2020-23448

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system's background /admin is in code AdminLoginInterceptor, which can be bypassed.

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system's background /admin is in code AdminLoginInterceptor, which can be bypassed.

newbee-mall todas las versiones están afectadas por un control de acceso incorrecto para obtener privilegios remotamente por medio del archivo AdminLoginInterceptor.java. La lógica de autenticación del fondo / administrador del sistema está en el código AdminLoginInterceptor, que se puede omitir