Threats Tagged 'ghsa-6rjg-gfrv-7842'

1 threat

Threats Tagged 'ghsa-6rjg-gfrv-7842'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.3%	CVE-2026-102363mall4j · Missing Authentication for Critical Function Medium6.3EPSS 0.3%2026-09-28CVE Database V5CVE-2026-102363 mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to read shipment tracking information by supplying an order number parameter. Attackers can access carrier names, waybill numbers, and complete logistics trails for any order without authentication or ownership verification. EPSS 0.3%Vulnerability gz-yami #ghsa-6rjg-gfrv-7842	CVE Database V5	2026-09-28

Showing 1–1 of 1 result