macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super administrator.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_password/mall_tiny_weak_password.md | Exploit Third Party Advisory |
| https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_password/mall_tiny_weak_password.md | Exploit Third Party Advisory |
Configurations
History
22 Apr 2025, 15:29
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Macrozheng
Macrozheng mall-tiny |
|
| References | () https://github.com/peccc/restful_vul/blob/main/mall_tiny_weak_password/mall_tiny_weak_password.md - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:macrozheng:mall-tiny:1.0.1:*:*:*:*:*:*:* |
31 Jan 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-31 22:15
Updated : 2025-04-22 15:29
NVD link : CVE-2024-57434
Mitre link : CVE-2024-57434
JSON object : View
Products Affected
macrozheng
- mall-tiny
CWE
No CWE.
