Submit #695943: youlai-mall latest Improper Control of Resource Identifiersinfo

Titleyoulai-mall latest Improper Control of Resource Identifiers
Descriptionyoulai-mall improper access control on App order deletion allows horizontal privilege escalation via orderId
Source⚠️ https://github.com/Hwwg/cve/issues/23
User
 huangweigang (UID 88993)
Submission11/15/2025 07:39 (5 months ago)
Moderation12/05/2025 09:35 (20 days later)
StatusAccepted
VulDB entry334476 [youlaitech youlai-mall 1.0.0/2.0.0 /app-api/v1/orders/ orderId improper control of dynamically-identified variables]
Points14

Want to stay up to date on a daily basis?

Enable the mail alert feature now!