Vulnerabilities

A weakness has been identified in macrozheng mall up to 1.0.3.

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

GitHub

Product

github

CVSS

5.4

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-109406 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 0
   CVE NVD 18d ago

   A security vulnerability has been detected in macrozheng mall up to 1.0.3.

   CVSS 3.1 CVE-2026-109407 GitHub