Invia #686529: mall <=1.0.3 Improper Control of Resource Identifiersinformazioni

Titolomall <=1.0.3 Improper Control of Resource Identifiers
DescrizioneThe mall application contains an authorization bypass vulnerability, allowing attackers to cancel orders on behalf of other users.
Fonte⚠️ https://github.com/Hwwg/cve/issues/12
Utente
 huangweigang (UID 88993)
Sottomissione31/10/2025 08:32 (12 mesi fa)
Moderazione15/11/2025 07:19 (15 days later)
StatoDuplicato
Voce VulDB332322 [macrozheng mall-swarm/mall fino a 1.0.3 /order/cancelOrder orderId escalationi di privilegi]
Punti0

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Interested in the pricing of exploits?

See the underground prices here!