Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: fushengqian Clear all filters
TI-2026-75491 CVE-2026-111705 · GHSA-56j7-v63x-xw99

Insecure direct object reference in Fuint exposes member booking records

Priority MEDIUM 57

Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows authenticated members to read other members' booking records by supplying arbitrary bookId values to /clientApi/book/myB…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00251 Published 2026-10-16 No fix listed CWE-639
TI-2026-72013 CVE-2026-110129 · GHSA-5cgx-vmcr-xxc6

Insecure direct object reference exposes fuintCatering refund records

Priority MEDIUM 64

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenticated members read other members' refund records.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00386 Published 2026-10-13 No fix listed CWE-639
TI-2026-72012 CVE-2026-110128 · GHSA-rqhg-m645-r86c

Missing authentication in fuint exposes member order details

Priority MEDIUM 44

fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/detail endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00436 Published 2026-10-13 No fix listed CWE-306