Description


A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads to incorrect calculation. The attack can be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

Related CPE's


Could not find any relations

Weaknesses



CWE-682

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

2.4 · Low

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-13T14:17:25.870Z

6 hours ago

Last modified

2026-10-13T19:26:24.643Z

1 hour ago