mall vulnerabilities
CVEs whose affected-version data names the mall package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-109410Low· 2.4A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b
A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads…
CVE-2026-109407Low· 3.1PoCA security vulnerability has been detected in macrozheng mall up to 1.0.3
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads t…
CVE-2026-109406Medium· 5.4A weakness has been identified in macrozheng mall up to 1.0.3
A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amou…
CVE-2026-108785Medium· 6.3PoCA flaw has been found in macrozheng mall up to 1.0.3
A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token ca…
CVE-2026-108784Medium· 6.5PoCA vulnerability was detected in macrozheng mall up to 1.0.3
A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manip…
CVE-2025-15118Medium· 4.3A security vulnerability has been detected in macrozheng mall up to 1.0.3
A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the component Member Endpoint. The manipulation leads to improper authorization. Re…