Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:realjerrytang:tacomall:*:*:*:*:*:*:*:*

1 brief RSS
high threat

Improper Authorization in Tacomall via OrgStaffServiceImpl

Tacomall 1.0.0 is vulnerable to an improper authorization flaw in the OrgStaffServiceImpl.add function, allowing remote attackers to manipulate isAdmin or jobId arguments to achieve unauthorized access.

exploited tacomall vulnerability authorization-bypass api-security
1t 1c