Threats Tagged 'ghsa-8r5r-2mmr-2vjr'

mall4j versions up to 4.0 have an improper authorization vulnerability due to an operator precedence logic error in the cleanExpiryProdList SQL statement. Authenticated storefront customers can exploit this flaw by sending a DELETE request to /p/shopCart/cleanExpiryProdList, which deletes cart items of other users for off-shelf products. These deleted items do not return when products are restocked. The vulnerability has a medium severity with a CVSS 4.0 score of 5.3.