A weakness was found in the Order Controller component of the sfturing hosp_order application. The flaw allows an attacker to manipulate the 'userIdenf' argument and bypass normal authorization checks, effectively gaining unauthorized access to resources or functions that should be restricted. The vulnerability is exploitable remotely through the exposed endpoint.

The vulnerability affects the sfturing hosp_order application, specifically the Order Controller module located in ssm_pro/src/main/java/cn/sfturing/web/OrderController.java. All releases up to commit 627f426331da8086ce8fff2017d65b1ddef384f8 are potentially impacted. Because the project uses a rolling‑release model, exact version information is not available, so any installation of the software prior to the fix is considered at risk.

The CVSS score of 6.9 indicates a moderate impact with remote exploitation potential. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack can be performed remotely via an HTTP request that manipulates the 'userIdenf' parameter, as confirmed by publicly available exploits. The combination of CWE‑285 (Authorization Bypass) and CWE‑639 (Incorrect Authorization) suggests that the flaw is due to improper authorization checks rather than a vulnerability in the underlying platform. Given the public availability of the exploit, the risk is elevated for unpatched deployments.