Macrozheng Mall vulnerabilities

• macrozheng mall macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation CVE-2026-109410 4.8 MediumOctober 13, 2026
• macrozheng mall macrozheng mall Coupon Redemption generateOrder race condition CVE-2026-109407 2.3 LowOctober 13, 2026
• macrozheng mall macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error CVE-2026-109406 5.3 MediumOctober 13, 2026
• macrozheng mall macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration CVE-2026-108785 5.3 MediumOctober 12, 2026
• macrozheng mall macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error CVE-2026-108784 6.9 MediumOctober 12, 2026
• macrozheng mall macrozheng mall Payment Status Endpoint paySuccess behavioral workflow CVE-2026-82423 5.3 MediumAugust 29, 2026
• macrozheng mall macrozheng mall Order Submission submit race condition CVE-2026-82364 2.3 LowAugust 29, 2026
• macrozheng mall macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error CVE-2026-79406 5.3 MediumAugust 25, 2026
• macrozheng mall macrozheng mall mall-portal getAuthCode password recovery CVE-2026-19361 6.3 MediumAugust 9, 2026
• macrozheng mall macrozheng mall Portal Endpoint create resource injection CVE-2026-15186 5.3 MediumJuly 9, 2026
• macrozheng mall macrozheng mall Super Admin Password update improper authorization CVE-2026-10070 5.1 MediumMay 29, 2026
• macrozheng mall macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure CVE-2026-25858 9.3 CriticalFebruary 7, 2026
• macrozheng mall macrozheng mall Member Endpoint update improper authorization CVE-2025-15118 5.3 MediumDecember 28, 2025
• macrozheng mall-swarm macrozheng mall-swarm delete improper authorization CVE-2025-14016 5.3 MediumDecember 4, 2025
• macrozheng mall macrozheng mall delete access control CVE-2025-13443 5.3 MediumNovember 20, 2025
• macrozheng mall, mall-swarm +1 more macrozheng mall-swarm paySuccess improper authorization CVE-2025-13118 5.3 MediumNovember 13, 2025
• macrozheng mall, mall-swarm +1 more macrozheng mall-swarm/mall cancelOrder improper authorization CVE-2025-13117 5.3 MediumNovember 13, 2025
• macrozheng mall, mall-swarm +1 more macrozheng mall-swarm/mall cancelUserOrder improper authorization CVE-2025-13116 5.3 MediumNovember 13, 2025
• macrozheng mall, mall-swarm +1 more macrozheng mall-swarm/mall Order Details detail improper authorization CVE-2025-13115 5.3 MediumNovember 13, 2025
• macrozheng mall-swarm macrozheng mall-swarm attr updateAttr improper authorization CVE-2025-13114 5.3 MediumNovember 13, 2025
• macrozheng mall macrozheng mall paySuccess authorization CVE-2025-9836 5.3 MediumSeptember 2, 2025
• macrozheng mall macrozheng mall cancelUserOrder cancelOrder authorization CVE-2025-9835 5.3 MediumSeptember 2, 2025
• macrozheng mall macrozheng mall Registration weak password CVE-2025-9514 6.3 MediumAugust 27, 2025
• macrozheng mall macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization CVE-2025-8755 6.9 MediumAugust 9, 2025
• macrozheng mall macrozheng mall Add Product Page upload cross site scripting CVE-2025-8750 4.8 MediumAugust 9, 2025
• macrozheng mall macrozheng mall Admin Login excessive authentication CVE-2025-8742 6.3 MediumAugust 8, 2025
• macrozheng mall macrozheng mall login cleartext transmission CVE-2025-8741 6.3 MediumAugust 8, 2025
• macrozheng mall macrozheng mall Swagger UI index.html cross site scripting CVE-2025-8191 Public exploit 5.1 MediumJuly 26, 2025
• macrozheng mall Weitong Mall Sale Endpoint improper authorization CVE-2025-4136 5.3 MediumApril 30, 2025
• macrozheng mall Weitong Mall Product Statistics queryTotal access control CVE-2025-4119 6.9 MediumApril 30, 2025
• macrozheng mall Weitong Mall Product History historyList access control CVE-2025-4118 6.9 MediumApril 30, 2025
• macrozheng mall-tiny In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation... CVE-2024-57435 6.5 MediumJanuary 31, 2025
• macrozheng mall-tiny macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users... CVE-2024-57434 8.8 HighJanuary 31, 2025
• macrozheng mall-tiny macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function.... CVE-2024-57433 7.5 HighJanuary 31, 2025
• macrozheng mall-tiny macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys... CVE-2024-57432 7.5 HighJanuary 31, 2025
• macrozheng mall macrozheng mall JWT Token default key CVE-2024-11619 2.3 LowNovember 22, 2024
• macrozheng mall, fuyanglipengjun wetong mall +1 more Weitong Mall OrderDao.xml sql injection CVE-2022-4961 5.5 MediumJanuary 12, 2024