Threats Tagged 'ghsa-97hh-9379-xqmm'

1 threat

Threats Tagged 'ghsa-97hh-9379-xqmm'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.4%	CVE-2026-102361mall4j · Missing Authentication for Critical Function Critical9.3EPSS 0.4%2026-09-28CVE Database V5CVE-2026-102361 CVE-2026-102361 is a critical vulnerability in gz-yami mall4j versions up to 4.0 that allows unauthenticated attackers to reset any storefront account password via the PUT /user/updatePwd endpoint. This missing authentication flaw enables attackers to specify a target username and overwrite passwords without verification, leading to account takeover and unauthorized access to orders and personal data. EPSS 0.4%Vulnerability gz-yami #ghsa-97hh-9379-xqmm	CVE Database V5	2026-09-28

Showing 1–1 of 1 result