CVE-2025-14086: youlaitech youlai-mall openid access control
A vulnerability was found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is an unknown function of the file /app-api/v1/members/openid/. The manipulation of the argument openid results in improper access controls. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14086?
CVE-2025-14086 has been classified as a high severity vulnerability due to improper access controls.
How do I fix CVE-2025-14086?
To fix CVE-2025-14086, update your Youlaitech Youlai-Mall application to the latest version or apply the necessary patches provided by the vendor.
What types of systems are affected by CVE-2025-14086?
CVE-2025-14086 affects Youlaitech Youlai-Mall versions 1.0.0 and 2.0.0.
Can CVE-2025-14086 be exploited remotely?
Yes, CVE-2025-14086 can be exploited remotely due to improper access control on the affected endpoint.
What are the potential impacts of CVE-2025-14086?
Exploitation of CVE-2025-14086 could lead to unauthorized access to sensitive user information.