The vulnerability is an authorization bypass flaw that allows any authenticated user who holds the menu permission to modify stock records in warehouses other than their own. Because GlobalGatewayFilter fails to enforce auth_warehouse scoping, an attacker can freely freeze or unfreeze container stock entries by targeting the freezeContainerStock and unfreezeContainerStock API endpoints. This flaw permits an attacker to alter inventory data, impacting the integrity of warehouse stock records and potentially disrupting business operations.

Vendor jingsewu offers the open-wes application. Versions up to and including 1.0.0 are affected by this broken access control issue. The vulnerability can be triggered in any deployment of open-wes 1.0.0 that exposes the GlobalGatewayFilter and ContainerStockController modules.

The CVSS score of 5.3 indicates moderate severity. EPSS is not available, so public exploitation data is unknown, and the issue is not currently listed in the CISA KEV catalog. Exploitation requires an authenticated session with menu permissions; an attacker can enumerate by incrementing sequential identifiers on the relevant endpoints. If internal users are granted such permissions, the risk of data tampering is real, making this a concern for environments with broad user privileges.