GHSA-gg5p-jmwj-r84mMediumCVSS 2.4
A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the...
🔗 CVE IDs covered (1)
📋 Description
A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads to incorrect calculation. The attack can be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-109410
- https://github.com/macrozheng/mall/issues/1004
- https://github.com/macrozheng/mall
- https://vuldb.com/cve/CVE-2026-109410
- https://vuldb.com/submit/982840
- https://vuldb.com/vuln/416952
- https://vuldb.com/vuln/416952/cti
- https://github.com/advisories/GHSA-gg5p-jmwj-r84m