CVE-2026-110126
MediumCVSS 5.4Summary
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController. Authenticated members can modify or delete other members' shipping addresses by enumerating auto-increment address ids and sending POST /address or DELETE /address/{addressId} requests.
Risk Assessment
Attackers can overwrite or remove victims' saved shipping addresses, potentially redirecting shipments, causing data loss, or disrupting order fulfillment.
Recommendation
Implement address ownership checks in modification and deletion operations so users can only manage their own addresses, and secure identifiers against enumeration.
Other vulnerabilities in waynboot-mall
See all- CVE-2026-110127Medium
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController. Authenticated members can modify or delete other members' cart items by enumerating sequential cart ids via PUT /cart, POST /cart/changeNum, and DELETE /cart/{cartId} to change quantities, selection state, or remove items.
- CVE-2026-110125Medium
Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying their order identifiers. Attackers can enumerate sequential order ids or serial numbers via detail, cancel, confirm, delete and refund endpoints to read recipient addresses and phone numbers or disrupt orders.
Original NVD description (English source)
waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shipping addresses. Attackers can enumerate auto-increment address ids and send POST /address or DELETE /address/{addressId} requests to overwrite or remove victims' saved addresses.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS