macrozheng mall vulnerabilities

In macrozheng mall 1.0.3 dcaa93b, the OmsOrderServiceImpl.updateMoneyInfo function in /order/update/moneyInfo (mall-admin/mall-portal component) leads to incorrect calculation. The attack can be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without explanation.

A security vulnerability has been detected in macrozheng mall up to 1.0.3. The issue affects the file /order/generateOrder in the Coupon Redemption component. Manipulation of the couponId argument leads to a race condition. The attack can be performed remotely but requires high complexity and is difficult to exploit. The vendor deleted the GitHub issue without explanation.

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the mall-portal component. Manipulation of the coupon_amount/pay_amount arguments causes business logic errors, remotely exploitable. The vendor deleted the GitHub issue for this vulnerability without explanation.

A vulnerability was found in macrozheng mall up to version 1.0.3 in the file /returnApply/create of the Portal Endpoint component. Manipulation of the orderId argument leads to improper control of resource identifiers. The attack can be initiated remotely and the exploit is publicly available.

In macrozheng mall version 1.0.3 and prior, there is an authentication vulnerability in the mall-portal password reset workflow. An unauthenticated attacker can reset any user's password using only the victim's telephone number. The one-time password (OTP) is exposed in the API response, and the reset request is validated solely by comparing the provided OTP to a value stored by telephone number, without verifying user identity or ownership of the telephone number.

A flaw has been found in macrozheng mall up to 1.0.3, affecting the JwtTokenUtil.refreshHeadToken function in /admin/refreshToken of the JwtAuthenticationTokenFilter component. Manipulation of the token argument causes session expiration. The attack may be initiated remotely and the exploit is publicly available. Patch name: 9bfc2fd2c4aaa4ac519e9152e65d673a5380de1a.

A vulnerability was detected in macrozheng mall up to 1.0.3, affecting the AlipayServiceImpl.pay function in com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the Payment Endpoint component. Manipulation of the total_amount argument results in business logic errors. The attack can be launched remotely and the exploit is publicly available. Patch dcaa93b3150352e5044708d7211b5bed0af4509f should be applied.

In macrozheng mall up to 1.0.3, a vulnerability exists in the Payment Status Endpoint component, in the file /order/paySuccess, where manipulation of the orderId argument leads to enforcement of behavioral workflow. The attack can be carried out remotely. The vendor deleted the GitHub issue without explanation.

A vulnerability has been detected in macrozheng mall up to 1.0.3. It affects an unknown function in the file /order/submit of the Order Submission component. The manipulation leads to a race condition. The attack can be initiated remotely but is considered difficult to exploit. The vendor deleted the GitHub issue without explanation.

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

Macrozheng mall up to version 1.0.3 has an authorization bypass vulnerability in the Super Admin Password Handler component in the /admin/update/ file. The attack can be performed remotely.

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the Member Endpoint component. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.