CERT24CVE-2026-110613 — youlai-mall through commit 9f62de8: Order Information Disclosure via App Order ListLoading data…
CERT24Threat Observatory
Period

CVE-2026-110613 — youlai-mall through commit 9f62de8: Order Information Disclosure via App Order List

youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders through the app order list endpoint.

← Back to intelligence

CVE-2026-110613 — youlai-mall through commit 9f62de8: Order Information Disclosure via App Order List

youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders through the app order list endpoint.