CVE-2026-108691mediumCWE-783

CVE-2026-108691: falha de média gravidade em gz-yami mall4j

mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items via /p/shopCart/cleanExpiryProdList

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar mall4j

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 5.3epss 0.2%
mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator precedence error in the cleanExpiryProdList SQL statement. Attackers can send one DELETE request to /p/shopCart/cleanExpiryProdList to remove every user's cart entries for off-shelf products, which do not return when products are restocked.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Produtos afetados
gz-yami · mall4j
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — gz-yami mall4j

No mesmo produto, das mais perigosas para as menos.

CVE-2026-102361CRITICALmall4j through 4.0 Missing Authentication in Password Update EndpointEPSS 0.4%CVE-2026-102362MEDIUMmall4j through 4.0 Missing Authentication in Product Review DeletionEPSS 0.3%CVE-2026-102363MEDIUMmall4j through 4.0 Unauthenticated Shipment Tracking Disclosure via Order NumberEPSS 0.3%CVE-2026-102365HIGHmall4j through 4.0 Missing Authorization in Admin User Address EndpointsEPSS 0.2%CVE-2026-108690MEDIUMmall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items via /p/shopCart/expiryProdListEPSS 0.2%CVE-2026-102367MEDIUMmall4j through 4.0 Insufficient Session Expiration via Token RefreshEPSS 0.2%