CVE-2020-23449: Newbee-Mall Project Newbee-Mall

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized changes can be made to any user information through the userID.

Affected products

• Newbee-Mall Project Newbee-Mall: any version

Published 2021-01-26. Last modified 2026-06-17.