CVE-2026-105572

MediumCVSS 4.3

Published: 06/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 06/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

A vulnerability was found in PickMall Lilishop up to 4.2.4 in /buyer/trade/receipt within the Buyer Invoice List component. Manipulation of the memberId argument leads to authorization bypass. The attack can be launched remotely and the exploit has been disclosed to the public.

Risk Assessment

Authorization bypass may allow an attacker to access invoices of other users. The public exploit increases the risk of exploitation.

Recommendation

Improve authorization mechanisms in /buyer/trade/receipt. Update the system or apply security patches.

Other vulnerabilities in Lilishop

CVE-2026-111647Medium
PickMall lilishop through 5.0.0 contains an insecure direct object reference vulnerability that allows authenticated buyers to read other buyers' invoice records because ReceiptServiceImpl.getDetail performs no ownership check. Attackers can supply another buyer's receipt id to GET /buyer/trade/receipt/{id} to obtain invoice titles, taxpayer identification numbers, order numbers, member ids and member names.

Original NVD description (English source)

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS