Vendor
fushengqian
9 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 7.5
fuint through commit 4c4bc8a Missing Authentication via /clientApi/order/detail
fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint. Attackers can enumerate sequential orderId values without an Ac…