CNNVD-202511-1622 Information
Nov 13, 2025
cve
CNNVD ID
CNNVD-202511-1622
Related CVE
- CNNVD Published: 2025-11-13
Description (Chinese)
mall-swarm是macro个人开发者的一套微服务商城系统。 mall-swarm 1.0.3及之前版本存在授权问题漏洞，该漏洞源于文件/cart/update/attr中updateAttr函数存在授权不当问题，可能导致远程攻击。
Description (English)
Mall-swarm is a micro-service mall system for macro developers. Mall-swarm 1.0.3 and previous versions have a mandate gap, which stems from the misauthorization of the updateattr function in document/cart/update/attr, which may lead to a remote attack.
Hazard Level
High
Vulnerability Type
授权问题
Affected Vendor
个人开发者
Published
2025-11-13
Last Modified
2026-02-24
References
https://github.com/Hwwg/cve/issues/5 https://vuldb.com/?ctiid.332319 https://vuldb.com/?id.332319 https://vuldb.com/?submit.683221
Share on: