CyberRota Analysis
AI-GeneratedA vulnerability in the macrozheng mall component affects versions up to 1.0.3, specifically within the /returnApply/create function of the Portal Endpoint, where improper handling of the orderId argument allows for unauthorized control of resource identifiers. This issue can be exploited remotely, and given that the exploit is publicly available, organizations using this component should prioritize remediation to mitigate potential unauthorized access. Security teams and developers utilizing affected versions should take immediate action to address this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /returnApply/create of the component Portal Endpoint. The manipulation of the argument orderId leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor deleted the GitHub issue for this vulnerability without any explanation.