PT-2026-83500
CVE-2026-82423
·
تاريخ النشر
2026-08-29
·
تاريخ التحديث
2026-09-01
الوصف من
CVSS 2.0
5.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
macrozheng mall versions prior to 1.0.4
Description
A remote issue exists in the Payment Status Endpoint component within the
/order/paySuccess file. Manipulation of the orderId argument allows an attacker to enforce a behavioral workflow.Recommendations
Update macrozheng mall to version 1.0.4 or later.
As a temporary mitigation, restrict access to the
/order/paySuccess endpoint or avoid using the orderId parameter until the update is applied. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾