제출 #694854: youlai-mall latest Improper Control of Resource Identifiers
| 제목 | youlai-mall latest Improper Control of Resource Identifiers |
|---|---|
| 설명 | The youlai-mall application has an improper access control vulnerability that allows unauthorized users to retrieve other users’ WeChat openid by manipulating the memberId parameter. |
| 원천 | ⚠️ https:/ |
| 사용자 | huangweigang (UID 88993) |
| 제출 | 2025. 11. 13. PM 02:39 (11 개월 ago) |
| 모더레이션 | 2025. 12. 04. PM 06:13 (21 days later) |
| 상태 | 수락 |
| VulDB 항목 | 334368 [youlaitech youlai-mall 1.0.0/2.0.0 members getMemberById memberId 권한 상승] |
| 포인트들 | 15 |