Threats tagged 'ghsa-v47m-7h34-6c9w'

A security vulnerability (CVE-2026-124565) exists in the fushengqian fuint software up to commit 36cc31b08d77facc94e8959afa02224891b4fe5f. The flaw is in the confirm function of MerchantOrderController.java within the Order Verification component, causing improper access controls. The vulnerability can be exploited remotely. The vendor has not provided version details or responded to disclosure. The CVSS score is 4.3, indicating medium severity.