CVE-2025-14052 | youlaitech youlai-mall 1.0.0/2.0.0 members getMemberById memberId access control

A vulnerability was found in youlaitech youlai-mall 1.0.0/2.0.0. It has been classified as critical. Affected by this vulnerability is the function getMemberById of the file /mall-ums/app-api/v1/members/. The manipulation of the argument memberId leads to improper access controls.

This vulnerability is uniquely identified as CVE-2025-14052. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.