Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3gfq-rr85-4p5x

Опубликовано: 09 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 6.3

Описание

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor deleted the GitHub issue for this vulnerability without any explanation.

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor deleted the GitHub issue for this vulnerability without any explanation.

EPSS

Процентиль: 15%
0.00237
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-99

Связанные уязвимости

CVSS3: 6.3
nvd
около 1 месяца назад

A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor deleted the GitHub issue for this vulnerability without any explanation.

EPSS

Процентиль: 15%
0.00237
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-99