CVE-2026-105444

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

EUVD-2026-92801

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

CVE-2026-105444 dotnet eShop Ordering API OrdersApi.cs GetOrderAsync resource injection

A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Ordering API. Performing a manipulation of the argument OrderNumber results in improper control of resource identifiers. T...

CVE-2026-105444

A security flaw exists in dotnet eShop .NET 8 within the Ordering API component. Specifically, the GetOrderAsync function in the file src/Ordering.API/Apis/OrdersApi.cs is vulnerable to resource injection (CWE-99). By manipulating the OrderNumber argument, an attacker can achieve improper control...