https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T17:09:47.342852+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110129 CVE-2026-110129 — fuintCatering through commit 122c9e6 IDOR via /clientApi/refund/detail 2026-10-14T17:09:47.345184+00:00

Affected: fushengqian fuintCatering

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenticated members read other members' refund records. Attackers can register freely and enumerate sequential refundId values to obtain buyers' names, national ID numbers, addresses, WeChat openIds, and order details.