CNNVD-202511-1617 Information
Nov 13, 2025
cve
CNNVD ID
CNNVD-202511-1617
Related CVE
- CNNVD Published: 2025-11-13
Description (Chinese)
mall-swarm是macro个人开发者的一套微服务商城系统。 mall-swarm 1.0.3及之前版本存在安全漏洞，该漏洞源于文件/order/paySuccess中paySuccess函数对orderID参数处理不当，可能导致授权不当问题。
Description (English)
Mall-swarm is a micro-service mall system for macro developers. There is a security loophole in the ball-swarm 1.0.3 and earlier versions, which stems from the inappropriate handling of the orderID parameters in the PaySuccess function in the document/order/paySuccess, which may lead to inappropriate authorization.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
个人开发者
Published
2025-11-13
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.332323 https://github.com/Hwwg/cve/issues/14 https://vuldb.com/?submit.683345 https://vuldb.com/?submit.686531 https://github.com/Hwwg/cve/issues/9 https://vuldb.com/?id.332323 https://access.redhat.com/security/cve/cve-2025-13118
Share on: