Skip to content
OpenAdvisories

Product · crmeb

crmeb_java

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-111354

    crmeb_java through 3.1 Authorization Bypass via Front Order Express and Refund Endpoints

    crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers can request /api/front/order/express/{orderId} or /api/front/order/apply/refund/{…

    crmeb crmeb_java