Fuint
Monthly
An insecure direct object reference in Fuint through commit 57ec018 lets authenticated members retrieve other members' booking records by supplying arbitrary bookId values to /clientApi/book/myBookDetail. Because bookId is an auto-increment integer, an attacker with a valid member account can enumerate records and obtain contact names, mobile numbers, in-store verification codes, service dates, stores, and remarks. No public exploit identified at time of analysis and no confirmed active exploitation; assessed severity is moderate with low confidentiality impact and no integrity or availability impact.
An insecure direct object reference in Fuint through commit 57ec018 lets authenticated members retrieve other members' booking records by supplying arbitrary bookId values to /clientApi/book/myBookDetail. Because bookId is an auto-increment integer, an attacker with a valid member account can enumerate records and obtain contact names, mobile numbers, in-store verification codes, service dates, stores, and remarks. No public exploit identified at time of analysis and no confirmed active exploitation; assessed severity is moderate with low confidentiality impact and no integrity or availability impact.