CVE-2025-13443

In macrozheng mall version 1.0.3 and prior, there is an authentication vulnerability in the mall-portal password reset workflow. An unauthenticated attacker can reset any user's password using only the victim's telephone number. The one-time password (OTP) is exposed in the API response, and the reset request is validated solely by comparing the provided OTP to a value stored by telephone number, without verifying user identity or ownership of the telephone number.

In macrozheng mall 1.0.3 dcaa93b, the OmsOrderServiceImpl.updateMoneyInfo function in /order/update/moneyInfo (mall-admin/mall-portal component) leads to incorrect calculation. The attack can be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without explanation.

A security vulnerability has been detected in macrozheng mall up to 1.0.3. The issue affects the file /order/generateOrder in the Coupon Redemption component. Manipulation of the couponId argument leads to a race condition. The attack can be performed remotely but requires high complexity and is difficult to exploit. The vendor deleted the GitHub issue without explanation.

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the mall-portal component. Manipulation of the coupon_amount/pay_amount arguments causes business logic errors, remotely exploitable. The vendor deleted the GitHub issue for this vulnerability without explanation.

A flaw has been found in macrozheng mall up to 1.0.3, affecting the JwtTokenUtil.refreshHeadToken function in /admin/refreshToken of the JwtAuthenticationTokenFilter component. Manipulation of the token argument causes session expiration. The attack may be initiated remotely and the exploit is publicly available. Patch name: 9bfc2fd2c4aaa4ac519e9152e65d673a5380de1a.

A vulnerability was detected in macrozheng mall up to 1.0.3, affecting the AlipayServiceImpl.pay function in com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the Payment Endpoint component. Manipulation of the total_amount argument results in business logic errors. The attack can be launched remotely and the exploit is publicly available. Patch dcaa93b3150352e5044708d7211b5bed0af4509f should be applied.

In macrozheng mall up to 1.0.3, a vulnerability exists in the Payment Status Endpoint component, in the file /order/paySuccess, where manipulation of the orderId argument leads to enforcement of behavioral workflow. The attack can be carried out remotely. The vendor deleted the GitHub issue without explanation.

A vulnerability has been detected in macrozheng mall up to 1.0.3. It affects an unknown function in the file /order/submit of the Order Submission component. The manipulation leads to a race condition. The attack can be initiated remotely but is considered difficult to exploit. The vendor deleted the GitHub issue without explanation.

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

A vulnerability was found in macrozheng mall up to version 1.0.3 in the file /returnApply/create of the Portal Endpoint component. Manipulation of the orderId argument leads to improper control of resource identifiers. The attack can be initiated remotely and the exploit is publicly available.