Macrozheng Mall-Tiny
4 CVEs affecting Macrozheng Mall-Tiny. Latest disclosed: 2025-01-31. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-57434 | High | 8.8 | 2025-01-31 | macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super administrator. |
CVE-2024-57433 | High | 7.5 | 2025-01-31 | macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches… |
CVE-2024-57432 | High | 7.5 | 2025-01-31 | macrozheng mall-tiny 1.0.1 suffers from Insecure Permissions. The application's JWT signing keys are hardcoded and do not change. User information is explicitl… |
CVE-2024-57435 | Medium | 6.5 | 2025-01-31 | In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all… |