Threats Tagged 'ghsa-m4x2-mf8c-9rmw'

1 threat

Threats Tagged 'ghsa-m4x2-mf8c-9rmw'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-108690mall4j · Operator Precedence Logic Error Medium5.3EPSS 0.2%2026-10-11CVE Database V5CVE-2026-108690 mall4j versions up to 4.0 contain an information disclosure vulnerability due to an operator precedence logic error in the getShopCartExpiryItems SQL filter. Authenticated users can exploit this flaw to access other shoppers' cart items, including product details, SKU, quantity, shop, and promoter card numbers. The vulnerability is rated medium severity with a CVSS 4.0 score of 5.3. EPSS 0.2%Vulnerability gz-yami #ghsa-m4x2-mf8c-9rmw	CVE Database V5	2026-10-11

Showing 1–1 of 1 result