CVE-2025-15086

Name of the Vulnerable Software and Affected Versions youlaitech youlai-mall versions 1.0.0 through 2.0.0

Description A weakness exists that causes improper access controls. The issue impacts the getMemberByMobile function within the file mall-ums/ums-boot/src/main/java/com/youlai/mall/ums/controller/app/MemberController.java. The attack can be initiated remotely, and the exploit is publicly available. The vendor was contacted regarding this disclosure but did not respond.

Recommendations youlaitech youlai-mall version 1.0.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. youlaitech youlai-mall version 2.0.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability.