CVE-2026-111705Published

Fuint through commit 57ec018 IDOR via bookId in myBookDetail

Explicit identifiers and source references

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-111705 · Microsoft / collected KEV context

cve-program · CVE-2026-111705

https://hackmd.io/@hieuPenguinnn/fuint-booking-detail-idor
https://github.com/fushengqian/fuint/blob/57ec01895e22dd93f16f493db30a77a7c1b148f2/fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientBookController.java#L252-L265
https://github.com/fushengqian/fuint/blob/57ec01895e22dd93f16f493db30a77a7c1b148f2/fuint-application/src/main/java/com/fuint/common/service/impl/BookItemServiceImpl.java#L237-L258
https://www.vulncheck.com/advisories/fuint-through-commit-57ec018-idor-via-bookid-in-mybookdetail

Related operational evidence

Explicit CVE identifiers

No related operational record is retained in the current change model.