Submit #695943: youlai-mall latest Improper Control of Resource Identifiersinfo

Titleyoulai-mall latest Improper Control of Resource Identifiers
Descriptionyoulai-mall improper access control on App order deletion allows horizontal privilege escalation via orderId
Source⚠️ https://github.com/Hwwg/cve/issues/23
User
 huangweigang (UID 88993)
Submission11/15/2025 07:39 (9 months ago)
Moderation12/05/2025 09:35 (20 days later)
StatusAccepted
VulDB entry334476 [youlaitech youlai-mall 1.0.0/2.0.0 /app-api/v1/orders/ orderId improper control of dynamically-identified variables]
Points14

Want to know what is going to be exploited?

We predict KEV entries!