CVE-2024-57433: High severity macrozheng mall-tiny vulnerability
Published Jan 31, 2025
·Updated
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control via the logout function. After a user logs out, their token is still available and fetches information in the logged-in state.
Affected Software
2 affected components
macrozheng mall-tiny
macrozheng mall-tiny=1.0.1
Event History
Jan 31, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-57433?
CVE-2024-57433 is considered a significant vulnerability due to incorrect access control in the logout function.
2
How do I fix CVE-2024-57433?
To fix CVE-2024-57433, ensure that the logout function properly invalidates user tokens upon logout.
3
What are the potential impacts of CVE-2024-57433?
The impacts of CVE-2024-57433 include unauthorized access to user information after a user has logged out.
4
Who is affected by CVE-2024-57433?
Users of macrozheng mall-tiny version 1.0.1 are affected by CVE-2024-57433.
5
Is there a patch available for CVE-2024-57433?
As of now, a specific patch has not been provided for CVE-2024-57433, but developers should implement security measures for token invalidation.