CyberRota Analysis
AI-GeneratedA vulnerability exists in the macrozheng mall versions up to 1.0.3, specifically in the OmsCartItemServiceImpl.updateQuantity function, which allows remote manipulation of the quantity argument, potentially leading to business logic errors. Organizations using this software should prioritize remediation to prevent exploitation, as the impact could disrupt normal business operations. Given the medium severity rating, it is essential for affected users to assess their risk and implement necessary updates or mitigations promptly.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.