https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T20:38:15.210852+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-102362 CVE-2026-102362 — mall4j through 4.0 Missing Authentication in Product Review Deletion 2026-09-29T20:38:15.212893+00:00

Affected: gz-yami mall4j

mall4j through 4.0 fails to implement authentication controls on the DELETE /prodComm endpoint in ProdCommController. Unauthenticated attackers can delete arbitrary product reviews by supplying the prodCommId parameter without authorization checks.