CVE-2024-57434

Name of the Vulnerable Software and Affected Versions Macrozheng Mall-Tiny version 1.0.1

Description The issue is related to incorrect access control. By default, the project imports users, and a test user is granted super administrator privileges.

Recommendations For Macrozheng Mall-Tiny version 1.0.1, consider removing the default import of users and the automatic assignment of super administrator rights to the test user as a temporary mitigation measure. Restrict access to sensitive areas of the project to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.