Soumettre #686529: mall <=1.0.3 Improper Control of Resource Identifiersinformation

Titremall <=1.0.3 Improper Control of Resource Identifiers
DescriptionThe mall application contains an authorization bypass vulnerability, allowing attackers to cancel orders on behalf of other users.
La source⚠️ https://github.com/Hwwg/cve/issues/12
Utilisateur
 huangweigang (UID 88993)
Soumission31/10/2025 08:32 (il y a 5 mois)
Modérer15/11/2025 07:19 (15 days later)
StatutDupliqué
Entrée VulDB332322 [macrozheng mall-swarm/mall jusqu’à 1.0.3 /order/cancelOrder orderId élévation de privilèges]
Points0

Do you need the next level of professionalism?

Upgrade your account now!