BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive
BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderController cancel and receive handlers that allows authenticated members to act on other members' orders by supplying their orderId. Attackers can cancel victims' pending orders to release allocated stock or confirm receipt of shipped orders, advancing fulfilment and settlement without the victim's consent.
CVE-2026-110608
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-110608
BizSpring Shop
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
BizSpring Java Mall
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/BizSpringSource/bizspring-shop-opensource",
"vendor": "BizSpring",
"product": "BizSpring Shop",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "git",
"lessThanOrEqual": "cf22d39daaf17f430d8fc1fb698a2f6e515e1808"
}
],
"packageURL": "pkg:github/BizSpringSource/bizspring-shop-opensource",
"collectionURL": "https://github.com/BizSpringSource/bizspring-shop-opensource",
"defaultStatus": "unaffected"
},
{
"repo": "https://github.com/bizspring-open/BizSpring-Java-Mall",
"vendor": "BizSpring",
"product": "BizSpring Java Mall",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "git",
"lessThanOrEqual": "369e88c5cda36ddcea56742c335ee1bfe50e8156"
}
],
"packageURL": "pkg:github/bizspring-open/BizSpring-Java-Mall",
"collectionURL": "https://github.com/bizspring-open/BizSpring-Java-Mall",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-110608
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #32858 · Revision 1
- Added to Heist Feed
- Publisher date