Xianyu Auto Reply
Approved changes feed: RSS · Atom
cpe:2.3:a:zhinianboke:xianyu-auto-reply:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Zhinianboke (42e92293-5965-5ff4-ab95-d9d7e7b4927a) |
|---|---|
| Product | Xianyu Auto Reply (04860994-603b-5528-a12c-b6bfad41ec7b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-15753 |
vulnerable | 2026-07-29 00:26:18.433355 |
zhinianboke xianyu-auto-reply review approve trusting http permission methods on the server side
MEDIUM (5.4)
A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown functionality of the file /api/v1/payment/withdraw/review?action=approve. Executing a manipulation can lead to trusting http permission methods on the server side. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called 19fc3282a1bb78a05c34945c088525d20e081cbd. It is best practice to apply a patch to resolve this issue.
Published: 2026-07-14T22:30:09.981Z
Updated: 2026-07-15T18:14:14.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15752 |
vulnerable | 2026-07-29 00:26:18.433124 |
zhinianboke xianyu-auto-reply Backend User Endpoint users authorization
HIGH (7.3)
A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f929da84. Affected is an unknown function of the file /api/v1/users/ of the component Backend User Endpoint. Performing a manipulation results in missing authorization. The attack may be initiated remotely. The exploit has been made public and could be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The patch is named 19fc3282a1bb78a05c34945c088525d20e081cbd. Applying a patch is the recommended action to fix this issue.
Published: 2026-07-14T22:15:12.207Z
Updated: 2026-07-15T12:40:30.487Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.