A vulnerability was found in youlaitech youlai-mall 1.0.0/2.0.0 and classified as critical. Affected is the function
getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables.
This vulnerability is handled as CVE-2025-14051. The attack can be executed remotely. Additionally, an exploit exists.
The vendor was contacted early about this disclosure but did not respond in any way.
