GCVE - cpe:2.3:a:macrozheng:mall-swarm:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:macrozheng:mall-swarm:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Macrozheng (`75483570-ac49-5445-b139-834b8f266707`)
Product	Mall Swarm (`45aa5866-37be-5aef-bc1c-3ab1f3ebfd0a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:gitee/macrozheng/mall-swarm`	purl2cpe	2026-06-01 10:13:42.912376
`pkg:github/macrozheng/mall-swarm`	purl2cpe	2026-06-01 10:13:42.912378

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-14016`	vulnerable	2026-06-08 07:06:33.390792	macrozheng mall-swarm delete improper authorization MEDIUM (5.4) A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected is the function delete of the file /member/readHistory/delete. Such manipulation of the argument ids leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-12-04T18:32:07.910Z Updated: 2025-12-05T19:07:10.483Z Open on db.gcve.eu Reference links https://vuldb.com/?id.334257 https://vuldb.com/?ctiid.334257 https://vuldb.com/?submit.694797 https://github.com/Hwwg/cve/issues/17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13118`	vulnerable	2026-06-08 07:04:31.640582	macrozheng mall-swarm paySuccess improper authorization MEDIUM (6.3) A vulnerability was detected in macrozheng mall-swarm up to 1.0.3. Affected by this issue is the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderID results in improper authorization. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-11-13T15:02:05.419Z Updated: 2026-05-23T14:07:07.382Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/332323 https://vuldb.com/vuln/332323/cti https://vuldb.com/submit/683345 https://vuldb.com/submit/686531 https://github.com/Hwwg/cve/issues/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13117`	vulnerable	2026-06-08 07:04:31.640158	macrozheng mall-swarm/mall cancelOrder improper authorization MEDIUM (5.4) A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-11-13T14:32:06.265Z Updated: 2025-11-15T06:19:29.104Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332322 https://vuldb.com/?ctiid.332322 https://vuldb.com/?submit.683340 https://vuldb.com/?submit.686529 https://github.com/Hwwg/cve/issues/7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13116`	vulnerable	2026-06-08 07:04:31.639727	macrozheng mall-swarm/mall cancelUserOrder improper authorization MEDIUM (5.4) A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-11-13T14:02:05.516Z Updated: 2025-12-19T19:20:13.791Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332321 https://vuldb.com/?ctiid.332321 https://vuldb.com/?submit.683339 https://vuldb.com/?submit.686530 https://github.com/Hwwg/cve/issues/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13115`	vulnerable	2026-06-08 07:04:31.637593	macrozheng mall-swarm/mall Order Details detail improper authorization MEDIUM (4.3) A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3. This impacts the function detail of the file /order/detail/ of the component Order Details Handler. Performing manipulation of the argument orderId results in improper authorization. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-11-13T13:32:09.111Z Updated: 2025-11-15T06:19:23.088Z Open on db.gcve.eu Reference links https://vuldb.com/?id.332320 https://vuldb.com/?ctiid.332320 https://vuldb.com/?submit.683222 https://vuldb.com/?submit.686528 https://github.com/Hwwg/cve/issues/6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-13114`	vulnerable	2026-06-08 07:04:31.636969	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.