CVE-2025-12304 | dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b Order Status PayController.java alipayIsSucceed improper authorization

October 26, 2025 Yanac

A vulnerability identified as problematic has been detected in dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b. This affects the function alipayIsSucceed of the file PayController.java of the component Order Status Handler. The manipulation leads to improper authorization.

This vulnerability is referenced as CVE-2025-12304. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More