Macrozheng vulnerabilities
29 CVEs and advisories name Macrozheng as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-109410macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation
- CVE-2026-109407macrozheng mall Coupon Redemption generateOrder race condition
- CVE-2026-109406macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error
- CVE-2026-108785macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration
- CVE-2026-108784macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error
- CVE-2026-82423macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
- CVE-2026-82364macrozheng mall Order Submission submit race condition
- CVE-2026-79406macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error
- CVE-2026-19361macrozheng mall mall-portal getAuthCode password recovery
- CVE-2026-15186macrozheng mall Portal Endpoint create resource injection
- CVE-2026-10070macrozheng mall Super Admin Password update improper authorization
- CVE-2026-25858macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure
- CVE-2025-15118macrozheng mall Member Endpoint update improper authorization
- CVE-2025-14016macrozheng mall-swarm delete improper authorization
- CVE-2025-13443macrozheng mall delete access control
- CVE-2025-13118macrozheng mall-swarm paySuccess improper authorization
- CVE-2025-13117macrozheng mall-swarm/mall cancelOrder improper authorization
- CVE-2025-13116macrozheng mall-swarm/mall cancelUserOrder improper authorization
- CVE-2025-13115macrozheng mall-swarm/mall Order Details detail improper authorization
- CVE-2025-13114macrozheng mall-swarm attr updateAttr improper authorization
- CVE-2025-9836macrozheng mall paySuccess authorization
- CVE-2025-9835macrozheng mall cancelUserOrder cancelOrder authorization
- CVE-2025-9514macrozheng mall Registration weak password
- CVE-2025-8755macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization
- CVE-2025-8750macrozheng mall Add Product Page upload cross site scripting
- CVE-2025-8742macrozheng mall Admin Login excessive authentication
- CVE-2025-8741macrozheng mall login cleartext transmission
- CVE-2025-8191macrozheng mall Swagger UI index.html cross site scripting
- CVE-2024-11619macrozheng mall JWT Token default key