Vulnerabilities

TI-2026-71697 CVE-2026-109410 · GHSA-gg5p-jmwj-r84m

macrozheng mall updateMoneyInfo incorrect calculation

LOW 22

A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00267 Published 2026-10-13 No fix listed CWE-682

TI-2026-71647 CVE-2026-109407 · GHSA-r82c-hj94-463x

Race condition in macrozheng mall coupon redemption

MEDIUM 45

A security vulnerability has been detected in macrozheng mall up to 1.0.3.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0017 Published 2026-10-13 No fix listed CWE-362

TI-2026-71646 CVE-2026-109406 · GHSA-x94q-f3xj-x9m2

Business logic error in macrozheng mall order generation

LOW 24

A weakness has been identified in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0025 Published 2026-10-13 No fix listed CWE-840

TI-2026-70820 CVE-2026-108785 · GHSA-6wph-fh59-8cv4

Insufficient session expiration in macrozheng mall JWT token refresh

MEDIUM 57

A flaw has been found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00289 Published 2026-10-12 No fix listed CWE-613

TI-2026-70819 CVE-2026-108784 · GHSA-wjhm-7w3j-9428

Business logic error in macrozheng mall payment endpoint

HIGH 70

A vulnerability was detected in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00347 Published 2026-10-12 No fix listed CWE-840

TI-2026-56827 CVE-2026-82423 · GHSA-699j-wcw4-p222

macrozheng mall Payment Status Endpoint paySuccess behavioral workflow

LOW 24

A vulnerability has been found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00437 Published 2026-08-29 No fix listed CWE-840

TI-2026-56789 CVE-2026-82364 · GHSA-v5wh-356j-jg3c

macrozheng mall Order Submission submit race condition

LOW 12

A security vulnerability has been detected in macrozheng mall up to 1.0.3.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.0029 Published 2026-08-29 No fix listed CWE-362

TI-2026-55089 CVE-2026-79406 · GHSA-jvqx-hg2g-crvf

macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error

LOW 24

A security vulnerability has been detected in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00387 Published 2026-08-25 No fix listed CWE-840

TI-2026-15796 CVE-2026-19361 · GHSA-4j4g-jhqh-8v4w

macrozheng mall mall-portal getAuthCode password recovery

MEDIUM 61

A flaw has been found in macrozheng mall 0504e86.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00438 Published 2026-08-09 No fix listed CWE-640

TI-2026-12790 CVE-2026-15186 · GHSA-3gfq-rr85-4p5x

macrozheng mall Portal Endpoint create resource injection

LOW 24

A vulnerability was identified in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00413 Published 2026-07-09 No fix listed CWE-99

TI-2026-08827 CVE-2026-10070 · GHSA-cv9f-r9m5-v3ww

macrozheng mall Super Admin Password update improper authorization

LOW 23

A vulnerability was found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00218 Published 2026-05-29 No fix listed CWE-266

TI-2026-20902 CVE-2026-25858 · GHSA-3h52-r54r-fvgf

macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure

HIGH 81

macrozheng mall version 1.0.3 and prior contains an authentication vulnerability in the mall-portal password reset workflow that allows an unauthenticated attacker to reset arbitrary user account passwords using only a v…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00706 Published 2026-02-07 No fix listed CWE-640

TI-2025-13796 CVE-2025-15118 · GHSA-m8rq-9x47-wwr7

macrozheng mall Member Endpoint update improper authorization

MEDIUM 57

A security vulnerability has been detected in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00261 Published 2025-12-28 No fix listed CWE-266

TI-2025-12807 CVE-2025-14016 · GHSA-xr44-7hqv-mrgr

macrozheng mall-swarm delete improper authorization

MEDIUM 57

A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00321 Published 2025-12-04 No fix listed CWE-266

TI-2025-12290 CVE-2025-13443 · GHSA-qwp5-2j5x-f2qf

macrozheng mall delete access control

MEDIUM 57

A vulnerability was detected in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00252 Published 2025-11-20 No fix listed CWE-266

TI-2025-11991 CVE-2025-13118 · GHSA-h7gg-9jgm-wfcf

macrozheng mall-swarm paySuccess improper authorization

MEDIUM 57

A vulnerability was detected in macrozheng mall-swarm up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00258 Published 2025-11-13 No fix listed CWE-266

TI-2025-11990 CVE-2025-13117 · GHSA-fppm-ghp9-2597

macrozheng mall-swarm/mall cancelOrder improper authorization

MEDIUM 57

A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00329 Published 2025-11-13 No fix listed CWE-266

TI-2025-11989 CVE-2025-13116 · GHSA-gc9m-cqr9-5r48

macrozheng mall-swarm/mall cancelUserOrder improper authorization

MEDIUM 57

A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00329 Published 2025-11-13 No fix listed CWE-266

TI-2025-11988 CVE-2025-13115 · GHSA-5p3h-545h-3hhq

macrozheng mall-swarm/mall Order Details detail improper authorization

MEDIUM 57

A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00354 Published 2025-11-13 No fix listed CWE-266

TI-2025-11987 CVE-2025-13114 · GHSA-8mr3-4h49-rv3h

macrozheng mall-swarm attr updateAttr improper authorization

MEDIUM 57

A vulnerability was identified in macrozheng mall-swarm up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0026 Published 2025-11-13 No fix listed CWE-266

TI-2025-09023 CVE-2025-9836 · GHSA-m5q3-x5vg-97f9

macrozheng mall paySuccess authorization

MEDIUM 57

A vulnerability was found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00311 Published 2025-09-02 No fix listed CWE-285

TI-2025-09022 CVE-2025-9835 · GHSA-4cvm-w5cq-5ghx

macrozheng mall cancelUserOrder cancelOrder authorization

MEDIUM 57

A vulnerability has been found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00352 Published 2025-09-02 No fix listed CWE-285

TI-2025-08719 CVE-2025-9514 · GHSA-3mmp-v5fp-4vcm

macrozheng mall Registration weak password

LOW 28

A vulnerability has been found in macrozheng mall up to 1.0.3.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00408 Published 2025-08-27 No fix listed CWE-521

TI-2025-08009 CVE-2025-8755 · GHSA-2w24-8j54-p2gx

macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization

HIGH 70

A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00603 Published 2025-08-09 No fix listed CWE-285

TI-2025-08004 CVE-2025-8750 · GHSA-5f7v-pm7r-mgh3

macrozheng mall Add Product Page upload cross site scripting

MEDIUM 55

A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00314 Published 2025-08-09 No fix listed CWE-79

Vulnerabilities

Filters