Skip to content
Heist/ feed
Medium

sfturing hosp_order CommonUserController.java cross-site request forgery

Type: advisorySource: Official CVE List1 source record

A vulnerability was determined in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. Impacted is an unknown function of the file ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java. Executing a manipulation can lead to cross-site request forgery. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The project was informed of the problem early through an issue report but has not responded yet.

Announced Source revision 1
Original source ↗

CVE-2026-96551

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-96551

hosp_order

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "cpes": [
      "cpe:2.3:a:sfturing:hosp_order:*:*:*:*:*:*:*:*"
    ],
    "vendor": "sfturing",
    "product": "hosp_order",
    "versions": [
      {
        "status": "affected",
        "version": "627f426331da8086ce8fff2017d65b1ddef384f8"
      }
    ]
  }
]
Related CVEs
CVE-2026-96551

Source reference: /cveMetadata/cveId

Publisher severity

medium

Source reference: /containers/cna/metrics

Event
#1724 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement