CVE-2026-110608

The BizSpring Shop software (through commit cf22d39daaf1 ) contains an Insecure Direct Object Reference (IDOR) vulnerability within the OrderController cancel and receive handlers. This flaw allows authenticated members to manipulate orders belonging to other members by providing a target orderId...