CVE-2024-50653

Name of the Vulnerable Software and Affected Versions: CRMEB versions prior to 5.4.0

Description: The issue allows users to bypass the front-end restriction of only being able to claim coupons once. This can be achieved by capturing packets and sending a large number of data packets for coupon collection, resulting in unlimited coupon collection.

Recommendations: For CRMEB versions prior to 5.4.0, update to version 5.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the coupon collection feature to minimize the risk of exploitation.