---
id: CVE-2026-110129
title: >-
  fuintCatering through commit 122c9e6 contains an insecure direct object
  reference vulnerability in the ClientRefundController refund detail endpoint
  that lets authenticated members read other members' refund records
summary: >-
  fuintCatering through commit 122c9e6 contains an insecure direct object
  reference vulnerability in the ClientRefundController refund detail endpoint
  that lets authenticated members read other members' refund records. Attackers
  can regist…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-639
published: '2026-10-13'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T17:17:38.797'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-110129'
references:
  - url: >-
      https://github.com/fushengqian/fuintCatering/blob/122c9e61a1bc7d947428b7c4f8be4faa76f38e11/fuintBackend/fuint-application/src/main/java/com/fuint/common/service/impl/RefundServiceImpl.java#L330-L353
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/fushengqian/fuintCatering/blob/122c9e61a1bc7d947428b7c4f8be4faa76f38e11/fuintBackend/fuint-application/src/main/java/com/fuint/module/clientApi/controller/ClientRefundController.java#L123-L133
    label: disclosure@vulncheck.com
  - url: >-
      https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/fuintcatering-client-refund-detail-idor
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/fuintcatering-through-commit-122c9e6-idor-via-clientapi-refund-detail
    label: disclosure@vulncheck.com
tags:
  - nvd
ingestedAt: '2026-10-13T17:38:53.193Z'
---

## Overview

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenticated members read other members' refund records. Attackers can register freely and enumerate sequential refundId values to obtain buyers' names, national ID numbers, addresses, WeChat openIds, and order details.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.