Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2fj9-fc6x-hgw7

Опубликовано: 30 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the file /queryTotal of the component Product Statistics Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the file /queryTotal of the component Product Statistics Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 16%
0.00051
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-266
CWE-639

Связанные уязвимости

CVSS3: 5.3
nvd
9 месяцев назад

A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the file /queryTotal of the component Product Statistics Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 16%
0.00051
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-266
CWE-639