Cpe:2.3:a:yunaiv:ruoyi_vue_pro:*:*:*:*:*:*:*:*

A remote authorization bypass in the ruoyi-vue-pro payment callback handler allows unauthorized manipulation of payment order states via the ID argument.