CVE-2023-36331

8.2

HIGHCVSS v3

Published

January 12, 2026

Affected

0 projects

Assigned by

MITRE

Severity scale

010

Description

Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to arbitrarily access other users' order details via manipulation of the query parameter userId.

exrick / xmall

cpe:2.3:a:exrick:xmall:1.1:*:*:*:*:*:*:*

1.1

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2023-36331

Description

More on this CVE