newbee-mall 授权问题漏洞

newbee-mall is a newbee open source e-commerce system . There is an authorization issue vulnerability in newbee-mall, which stems from improper handling of the parameter orderNo of the component Order Status Handler in file/paySuccess, which may lead to improper authorization...