Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Mall — Vulnerabilities & Security Advisories 27

All 27 CVE vulnerabilities found in Mall, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities specifically affecting the Mall e-commerce platform, categorized by vendor advisories, product versions, and weakness types. The collection encompasses a wide spectrum of flaws including cross-site scripting, SQL injection, and insecure direct object references reported between the platform's initial public release and the current year. Readers can utilize this resource to track the vendor's historical security advisories, understand the prevalence of specific weakness classes within retail software, or look up the complete vulnerability history for any version of the Mall product. The data presented here is derived from public disclosures and official vendor communications to provide a factual overview of the platform's security posture over time. By consolidating these records, the page serves as a centralized reference for security professionals assessing risk, developers planning remediation efforts, and auditors verifying compliance with industry standards. No marketing language or promotional content is included; the focus remains strictly on technical details and chronological data regarding identified security gaps. Users seeking to mitigate risks or understand the evolution of threats against this specific application will find the organized listings essential for informed decision-making and proactive defense strategies.

Vendor: Weitong

CVE ID Title CVSS Severity Published
CVE-2026-109410 macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation CWE-682 2.4 Low 2026-10-13
CVE-2026-109407 macrozheng mall Coupon Redemption generateOrder race condition CWE-362 3.1 Low 2026-10-13
CVE-2026-109406 macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error CWE-840 5.4 Medium 2026-10-13
CVE-2026-108785 macrozheng mall JwtAuthenticationTokenFilter refreshToken JwtTokenUtil.refreshHeadToken session expiration CWE-613 6.3 Medium 2026-10-12
CVE-2026-108784 macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error CWE-840 6.5 Medium 2026-10-12
CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow CWE-841 5.4 Medium 2026-08-29
CVE-2026-82364 macrozheng mall Order Submission submit race condition CWE-362 4.2 Medium 2026-08-29
CVE-2026-79406 macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error CWE-840 4.3 Medium 2026-08-25
CVE-2026-19361 macrozheng mall mall-portal getAuthCode password recovery CWE-640 3.7 Low 2026-08-09
CVE-2026-15186 macrozheng mall Portal Endpoint create resource injection CWE-99 6.3 Medium 2026-07-09
CVE-2026-10070 macrozheng mall Super Admin Password update improper authorization CWE-285 4.7 Medium 2026-05-29
CVE-2026-25858 macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure CWE-640 9.1 Critical 2026-02-07
CVE-2025-15118 macrozheng mall Member Endpoint update improper authorization CWE-285 4.3 Medium 2025-12-28
CVE-2025-13443 macrozheng mall delete access control CWE-284 5.4 Medium 2025-11-20
CVE-2025-9836 macrozheng mall paySuccess authorization CWE-639 4.3 Medium 2025-09-02
CVE-2025-9835 macrozheng mall cancelUserOrder cancelOrder authorization CWE-639 4.3 Medium 2025-09-02
CVE-2025-9514 macrozheng mall Registration weak password CWE-521 3.7 Low 2025-08-27
CVE-2025-8755 macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization CWE-639 5.3 Medium 2025-08-09
CVE-2025-8750 macrozheng mall Add Product Page upload cross site scripting CWE-79 2.4 Low 2025-08-09
CVE-2025-8742 macrozheng mall Admin Login excessive authentication CWE-307 3.7 Low 2025-08-08
CVE-2025-8741 macrozheng mall login cleartext transmission CWE-319 3.7 Low 2025-08-08
CVE-2025-8191 macrozheng mall Swagger UI index.html cross site scripting CWE-79 3.5 Low 2025-07-26
CVE-2025-4136 Weitong Mall Sale Endpoint improper authorization CWE-285 5.4 Medium 2025-04-30
CVE-2025-4119 Weitong Mall Product Statistics queryTotal access control CWE-284 5.3 Medium 2025-04-30
CVE-2025-4118 Weitong Mall Product History historyList access control CWE-284 5.3 Medium 2025-04-30
CVE-2024-11619 macrozheng mall JWT Token default key CWE-1394 5.0 Medium 2024-11-22
CVE-2022-4961 Weitong Mall OrderDao.xml sql injection CWE-89 5.5 Medium 2024-01-12

All 27 known CVE vulnerabilities affecting Mall with full Chinese analysis, references, and POCs where available.