Threats Tagged 'ghsa-239c-84f4-cp5f'

1 threat

Threats Tagged 'ghsa-239c-84f4-cp5f'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.3%	CVE-2026-102362mall4j · Missing Authentication for Critical Function Medium6.9EPSS 0.3%2026-09-28CVE Database V5CVE-2026-102362 mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks. EPSS 0.3%Vulnerability gz-yami #ghsa-239c-84f4-cp5f	CVE Database V5	2026-09-28

Showing 1–1 of 1 result