提交 #695943: youlai-mall latest Improper Control of Resource Identifiers信息

标题youlai-mall latest Improper Control of Resource Identifiers
描述youlai-mall improper access control on App order deletion allows horizontal privilege escalation via orderId
来源⚠️ https://github.com/Hwwg/cve/issues/23
用户
 huangweigang (UID 88993)
提交2025-11-15 07時39分 (5 月前)
管理2025-12-05 09時35分 (20 days later)
状态已接受
VulDB条目334476 [youlaitech youlai-mall 1.0.0/2.0.0 /app-api/v1/orders/ orderId 权限提升]
积分14

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!