CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

RedhatCVE•added 2026/01/13 10:54 p.m.•13 views

CVE-2023-36331

Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via manipulation of the query parameter userId...

8.2CVSS6.8AI score0.00234EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2026/01/12 12:00 a.m.•1 views

CVE-2023-36331: Authorization Bypass Through User-Controlled Key

Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via manipulation of the query parameter userId...

8.2CVSS5.7AI score0.00234EPSS

SaveExploits1References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by