{"id":"CVE-2026-110771","summary":"Shopizer through 3.2.5 Authorization Bypass via Product Review customerId","details":"Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field. Attackers can send crafted requests to POST /api/v1/auth/products/{id}/reviews to publish reviews and ratings attributed to other store customers, corrupting authorship and product ratings.","modified":"2026-10-15T10:47:27.653791803Z","published":"2026-10-14T18:47:57.175Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110771.json","cna_assigner":"VulnCheck","cwe_ids":["CWE-639"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110771.json"},{"type":"PACKAGE","url":"https://github.com/shopizer-ecommerce/shopizer"},{"type":"ARTICLE","url":"https://github.com/shopizer-ecommerce/shopizer/blob/9a1602a664ab882b5420ff4339db45af44a48423/sm-shop/src/main/java/com/salesmanager/shop/populator/catalog/PersistableProductReviewPopulator.java#L66"},{"type":"REPORT","url":"https://github.com/shopizer-ecommerce/shopizer/issues/1112"},{"type":"EVIDENCE","url":"https://hackmd.io/@hieuPenguinnn/shopizer-rest-product-review-idor"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110771"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/shopizer-through-3.2.5-authorization-bypass-via-product-review-customerid"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/shopizer-ecommerce/shopizer","events":[{"introduced":"0"},{"last_affected":"9a1602a664ab882b5420ff4339db45af44a48423"}],"database_specific":{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"0"},{"last_affected":"3.2.5"}]}}],"versions":["v3.2.5","v3.2.2","3.2.2","3.2.0","3.1.0","v3.0.1","3.0.1","2.17.0","3.0.0","2.16.0","2.15.0","v2.14.1","2.14.1","v2.14.0","v2.13.0","2.13.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110771.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"}]}