CVE-2026-111705
mediumFuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows authenticated members to read other members' booking record…
Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows authenticated members to read other members' booking records by supplying arbitrary bookId values to /clientApi/book/myBookDetail. Attackers can iterate the auto-increment bookId to retrieve contact names, mobile numbers, in-store verification codes, service dates, stores and remarks.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/fushengqian/fuint/blob/57ec01895e22dd93f16f493db30a77a7c1b148f2/fuint-a... disclosure@vulncheck.com
- https://github.com/fushengqian/fuint/blob/57ec01895e22dd93f16f493db30a77a7c1b148f2/fuint-a... disclosure@vulncheck.com
- https://hackmd.io/@hieuPenguinnn/fuint-booking-detail-idor disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/fuint-through-commit-57ec018-idor-via-bookid-in-myboo... disclosure@vulncheck.com
- https://hackmd.io/@hieuPenguinnn/fuint-booking-detail-idor 134c704f-9b21-4f2e-91b3-4a467353bcc0