TI-2024-37890 CVE-2024-57432 · GHSA-5ggv-wq69-w49q
macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions.
Priority HIGH 74
macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions.
macrozheng
Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
macrozheng records in CISA KEVNo macrozheng vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Mall-tiny · all components
TI-2024-37892 CVE-2024-57434 · GHSA-g4gp-j663-8rgg
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control.
Priority HIGH 73
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control.
TI-2024-37891 CVE-2024-57433 · GHSA-pr8c-fv23-2j59
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout…
Priority HIGH 72
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function.
TI-2024-37893 CVE-2024-57435 · GHSA-p7gc-vhmf-5wjc
In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource…
Priority MEDIUM 62
In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent operations that require authentication, which trig…