CVE:CVE-2020-23449
CNNVD:CNNVD-202101-2344
newbee-mall是一套电子商务系统。
newbee-mall all versions 存在访问控制错误漏洞，该漏洞允许通过NewBeeMallIndexConfigServiceImpl. java远程获得特权。
solution:Upgrade newbee-mall_project newbee-mall to a higher version than *