Threats tagged 'ghsa-8pjf-7rrv-hw3r'

Course-tencent-cloud versions before 2.0.2 have an insecure direct object reference (IDOR) vulnerability. This flaw allows unauthenticated attackers to access refund preview information of other users by supplying an order serial number (sn) to the /api/refund/confirm endpoint. Attackers can derive valid sn values from Sqids-encoded sequential order IDs using the default key, exposing ordered items, prices, refund amounts, fees, and deadlines.