2026年9月29日

CVE-2026-102362 [MEDIUM] – mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endp

未分类

📑 文章目录

mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks.

相关文章