Jeequan Jeepay authorization issue vulnerability

Jeequan Jepay versions 3.2.9 and earlier have an authorization issue vulnerability. This vulnerability stems from insecure direct object references. Attackers can override the payment channel configurations of other merchants by providing the victim’s infoId to...