CNNVD-202509-117 Information
Sep 02, 2025
cve
CNNVD ID
CNNVD-202509-117
Related CVE
- CNNVD Published: 2025-09-02
Description (Chinese)
mall是macro个人开发者的一套电商系统，包括前台商城系统及后台管理系统。 mall 1.0.3及之前版本存在安全漏洞，该漏洞源于对文件/order/cancelUserOrder中参数orderId的错误操作导致授权绕过。
Description (English)
Mall is a set of electrician systems for Macro’s personal developers, including the front and back office management systems. mall 1.0.3 and previous versions contain a security loophole that results from the error in the use of the parameter orderId in the document/order/cancelUserOrder, resulting in the authorization circumvention.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-09-02
Last Modified
2026-02-24
References
https://vuldb.com/?submit.641729 https://vuldb.com/?id.322182 https://vuldb.com/?ctiid.322182 https://github.com/ez-lbz/poc/issues/46#issue-3354477952 https://access.redhat.com/security/cve/cve-2025-9835 https://nvd.nist.gov/vuln/detail/CVE-2025-9835
Share on: