Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

16 records

Priority HIGH 81

macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitrary user account passwords using only a v…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00706 Published 2026-02-07 No fix listed CWE-640
TI-2025-12290 CVE-2025-13443 · GHSA-qwp5-2j5x-f2qf

macrozheng mall delete access control

Priority MEDIUM 57

A vulnerability was detected in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00252 Published 2025-11-20 No fix listed CWE-266
TI-2025-09023 CVE-2025-9836 · GHSA-m5q3-x5vg-97f9

macrozheng mall paySuccess authorization

Priority MEDIUM 57

A vulnerability was found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00311 Published 2025-09-02 No fix listed CWE-285
TI-2025-08719 CVE-2025-9514 · GHSA-3mmp-v5fp-4vcm

macrozheng mall Registration weak password

Priority LOW 28

A vulnerability has been found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00408 Published 2025-08-27 No fix listed CWE-521
Priority MEDIUM 61

A vulnerability was found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00419 Published 2025-08-08 No fix listed CWE-310
TI-2024-10766 CVE-2024-11619 · GHSA-6cjp-89m2-82w2

macrozheng mall JWT Token default key

Priority LOW 13

A vulnerability, which was classified as problematic, has been found in macrozheng mall up to 1.0.3.

CVSS 4.0LOW 2.3 Adjacent network No auth No interaction EPSS 0.00733 Published 2024-11-22 No fix listed CWE-1394