| عنوان | youlai-mall latest Improper Control of Resource Identifiers |
|---|
| الوصف | The youlai-mall application has an improper access control vulnerability that allows unauthorized users to retrieve other users’ WeChat openid by manipulating the memberId parameter. |
|---|
| المصدر | ⚠️ https://github.com/Hwwg/cve/issues/21 |
|---|
| المستخدم | huangweigang (UID 88993) |
|---|
| ارسال | 13/11/2025 02:39 PM (11 أشهر منذ) |
|---|
| الاعتدال | 04/12/2025 06:13 PM (21 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 334368 [youlaitech youlai-mall 1.0.0/2.0.0 members getMemberById memberId تجاوز الصلاحيات] |
|---|
| النقاط | 15 |
|---|