CRMEB 授权问题漏洞

CRMEB is an open-source Java e-commerce system developed by CRMEB. Versions of CRMEB 5.6.3 and earlier contained a vulnerability related to authorization issues. This vulnerability stemmed from incorrect handling of the orderid parameter in files like /api/storeintegral/order/detail/:uni, which...