Threats tagged 'ghsa-5p3h-545h-3hhq'

A security flaw exists in macrozheng mall-swarm versions up to 1.0.3 affecting the Order Details Handler component. Manipulating the orderId argument in the /order/detail/ function leads to improper authorization. The vulnerability can be exploited remotely. Public exploit code is available, but the vendor has not responded or issued a fix. The CVSS score is 4.3, indicating medium severity.