This vulnerability exists in the orderRecordsService.cancelOrder function within the ssm_pro/src/main/java/cn/sfturing/web/OrderController.java file of the sfturing hosp_order component. By manipulating the ID argument, an attacker can bypass authorization checks remotely. The product's rolling release model prevents disclosure of specific affected or patched versions. The vulnerability was reported early to the project, but no remediation or official fix has been issued. Public exploit code is available, increasing the risk of exploitation.

An attacker can remotely bypass authorization controls in the order cancellation functionality, potentially allowing unauthorized cancellation of orders. This could lead to unauthorized actions within the system, impacting data integrity and operational processes. No known active exploitation in the wild has been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, monitor official channels for updates. Until a fix is available, consider restricting access to the affected functionality and implementing additional access controls where possible.