제출 #641729: macrozheng mall ≤ v1.0.3 IDOR
| 제목 | macrozheng mall ≤ v1.0.3 IDOR |
|---|---|
| 설명 | In mall versions up to v1.0.3, the /order/cancelUserOrder endpoint contains a horizontal privilege escalation vulnerability. This allows a user to cancel another user’s order, leading to unauthorized operations. |
| 원천 | ⚠️ https:/ |
| 사용자 | ez-lbz (UID 87033) |
| 제출 | 2025. 08. 26. AM 09:27 (10 개월 ago) |
| 모더레이션 | 2025. 09. 02. PM 02:49 (7 days later) |
| 상태 | 수락 |
| VulDB 항목 | 322182 [macrozheng mall 까지 1.0.3 /order/cancelUserOrder cancelOrder orderId 권한 상승] |
| 포인트들 | 16 |