CVE-2023-30216: Newbee-Mall Project Newbee-Mall

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information.

Affected products

• Newbee-Mall Project Newbee-Mall: before 2022-10-27 (fixed in 2022-10-27)

Published 2023-05-04. Last modified 2026-06-17.