E Commerce Project Springboot
Monthly
Authorization bypass via IDOR in jaygajera17's Spring Boot e-commerce project allows any authenticated user to overwrite an arbitrary user's profile by supplying a foreign integer `userid` to the `updateUserProfile` endpoint in `UserController.java`. The `updateUserProfile()` method never compares the supplied `userid` against the authenticated principal, so a low-privilege session can silently modify any account's username, password, or profile fields. A public Python proof-of-concept exploit is available; a corrective pull request exists but has not yet been merged.
Authorization bypass via IDOR in jaygajera17's Spring Boot e-commerce project allows any authenticated user to overwrite an arbitrary user's profile by supplying a foreign integer `userid` to the `updateUserProfile` endpoint in `UserController.java`. The `updateUserProfile()` method never compares the supplied `userid` against the authenticated principal, so a low-privilege session can silently modify any account's username, password, or profile fields. A public Python proof-of-concept exploit is available; a corrective pull request exists but has not yet been merged.