Description
A vulnerability was detected in jaygajera17 E-commerce-project-springBoot up to 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2. The impacted element is the function UserController.updateUser of the file UserController.java. Performing a manipulation of the argument userid results in authorization bypass. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The pull request to fix this issue awaits acceptance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| jaygajera17 | E-commerce-project-springBoot | 5e74a46b4b70623d0e4a0c9c4aee3bd1777185d2 | — |
References
- VDB-403180 | jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization vdb-entry technical-description
- VDB-403180 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-90598 | CVE Analysis and Report third-party-advisory
- Submit #913792 | jaygajera17 E-commerce-project-springBoot 1.0 Authorization Bypass Through User-Controlled Key third-party-advisory
- https://github.com/jaygajera17/E-commerce-project-springBoot/issues/172 issue-tracking
- https://github.com/jaygajera17/E-commerce-project-springBoot/pull/174 issue-tracking patch
- https://github.com/user-attachments/files/30648539/poc_idor_updateuser.py exploit patch
- https://github.com/jaygajera17/E-commerce-project-springBoot/ product