A software flaw in the execute method of TradeAddressListDirective.java of Sanluan PublicCMS allows an attacker to manipulate the userId or id arguments and bypass authentication controls. This missing authentication leads to disclosure of other users’ trade address information, compromising confidentiality and potentially enabling further misuse of address data. The weakness is categorized as CWE-287 (Improper Authentication) and CWE-306 (Missing Authentication for Critical Function).

Sanluan PublicCMS version 5.202506.d is affected by this vulnerability. The flaw resides in the Trade Address Query Handler component and is specific to this product version.

The CVSS score is 6.9, indicating a medium level of severity. The EPSS score is not available, but the vulnerability has a publicly available exploit and can be launched remotely, raising the risk of real-world attacks. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit it by sending crafted requests to the Trade Address Query endpoint, manipulating user identifiers without authentication, and retrieving sensitive trade address data. The lack of hardening and authentication makes this a straightforward attack vector for determined adversaries.