Medium
yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint
Type: advisorySource: Official CVE List
yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated members to read other members' after-sale operation logs by supplying arbitrary…
Products: yudao-cloudCVEs: CVE-2026-116015