Skip to content
OpenAdvisories

Vendor

gz-yami

10 known vulnerabilities.

Products

mall4j 9 mall4cloud 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-102363

    mall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order Number

    mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to read shipment tracking information by supplying an order number parameter. Attackers can access carrie…

    gz-yami mall4j