Vulnerability Description
A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberController.java of the component com.macro.mall.portal.controller. The manipulation of the argument orderId leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Macrozheng | Mall | <= 1.0.3 |
Related Weaknesses (CWE)
References
- https://github.com/N1n3b9S/cve/issues/14ExploitIssue TrackingThird Party Advisory
- https://github.com/N1n3b9S/cve/issues/14#issue-3269039303ExploitIssue TrackingThird Party Advisory
- https://vuldb.com/?ctiid.319253Permissions RequiredVDB Entry
- https://vuldb.com/?id.319253Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.624046Third Party AdvisoryVDB Entry
- https://github.com/N1n3b9S/cve/issues/14ExploitIssue TrackingThird Party Advisory
FAQ
What is CVE-2025-8755?
CVE-2025-8755 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberController.java of the component com.macro.mall.port...
How severe is CVE-2025-8755?
CVE-2025-8755 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-8755?
Check the references section above for vendor advisories and patch information. Affected products include: Macrozheng Mall.