What is CVE-2024-57432?

CVE-2024-57432 is a high-severity vulnerability in Macrozheng Mall-Tiny, classified under Improper Authentication. CVSS score: 7.5/10. Published 2025-01-31.

How severe is CVE-2024-57432?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Macrozheng Mall-Tiny

CVE-2024-57432

macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do not change. User information is explicitly written into the JWT and used for subsequent privilege management, making it is possible to forge the JWT of any user to achieve authentication bypass.

Vulnerability class: Broken Authentication

EPSS: 0.005 (40.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Macrozheng Mall-tiny — versions 1.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2024-57432?: CVE-2024-57432 is a high-severity vulnerability in Macrozheng Mall-Tiny, classified under Improper Authentication. CVSS score: 7.5/10. Published 2025-01-31.
How severe is CVE-2024-57432?: High severity. CVSS v3 base score is 7.5 out of 10.