CVE-2026-111697
CVE-2026-111697 · HUIZHI ChargeOS cloud through 3.0.9 IDOR via hcp-mp Member and Order APIs
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
HUIZHI ChargeOS cloud through 3.0.9 contains an insecure direct object reference vulnerability in the hcp-mp MeController and OrderController that trusts client-supplied userId, openId and orderNumber parameters. Attackers can enumerate sequential member ids against endpoints like /me/getMemberBalanceByUserId and /order/orderDetail to read any member's wallet, credit, profile and charging orders.
CVSS 7.1 · Alta · EPSS 0,4%
- Publicación
- Actualización
Productos y versiones afectados
huizhi-chargeos-cloud
- Versiones
- ≥ 0, ≤ 3.0.9: Afectada (custom)
Sin corrección publicada
Fuentes originales
- https://hackmd.io/@hieuPenguinnn/huizhi-chargeos-mp-member-api-userid-idor
- https://github.com/roinli/HUIZHI-ChargeOS-cloud/blob/1a2cbab79bb7abe7df3b4f9977f5d0e18e65bd4a/hcp-modules/hcp-mp/src/main/java/com/hcp/mp/controller/MeController.java#L40-L91
- https://github.com/roinli/HUIZHI-ChargeOS-cloud/blob/1a2cbab79bb7abe7df3b4f9977f5d0e18e65bd4a/hcp-modules/hcp-mp/src/main/java/com/hcp/mp/controller/OrderController.java#L59-L87
- https://www.vulncheck.com/advisories/huizhi-chargeos-cloud-through-3.0.9-idor-via-hcp-mp-member-and-order-apis
- https://nvd.nist.gov/vuln/detail/CVE-2026-111697