Threats tagged 'ghsa-rpwx-j4h5-qmxw'

A vulnerability in the RefundServiceImpl.agreeRefund function of the Refund Agreement component in fushengqian fuintCatering allows improper access control. This flaw can be exploited remotely and affects versions up to commit 6d054f5788ac8645eb491f79242bb8a625efc133. The product uses a rolling release model, so no specific version numbers are provided. The vendor has not responded to disclosure attempts. The CVSS score is 4.3, indicating medium severity.