제출 #683339: mall-swarm <=1.0.3 Improper Control of Resource Identifiers정보

제목mall-swarm <=1.0.3 Improper Control of Resource Identifiers
설명The mall-swarm application contains an authorization bypass vulnerability, which allows an attacker to manipulate order payments using another user’s order ID.
원천⚠️ https://github.com/Hwwg/cve/issues/8
사용자
 huangweigang (UID 88993)
제출2025. 10. 27. PM 04:05 (12 개월 ago)
모더레이션2025. 11. 13. AM 07:56 (17 days later)
상태수락
VulDB 항목332321 [macrozheng mall-swarm/mall 까지 1.0.3 /order/cancelUserOrder orderId 권한 상승]
포인트들15

◂ 이전개요다음 ▸

Interested in the pricing of exploits?

See the underground prices here!