CVE-2026-15753

Description

A vulnerability was determined in zhinianboke xianyu-auto-reply on Server. Affected by this vulnerability is an unknown functionality of the file /api/v1/payment/withdraw/review?action=approve. Executing a manipulation can lead to trusting http permission methods on the server side. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. This patch is called 19fc3282a1bb78a05c34945c088525d20e081cbd. It is best practice to apply a patch to resolve this issue.

References

https://vuldb.com/vuln/378335/cti

https://vuldb.com/vuln/378335

https://vuldb.com/submit/856719

https://vuldb.com/cve/CVE-2026-15753

https://github.com/zhinianboke/xianyu-auto-reply/issues/192

https://github.com/zhinianboke/xianyu-auto-reply/commit/19fc3282a1bb78a05c34945c088525d20e081cbd

https://github.com/zhinianboke/xianyu-auto-reply/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4