Skip to content
OpenAdvisories

Vendor

fushengqian

9 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail

    fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint. Attackers can enumerate sequential orderId values without an Ac…