CVE-2025-14016: macrozheng mall-swarm delete improper authorization
A security vulnerability has been detected in macrozheng mall-swarm up to 1.0.3. Affected is the function delete of the file /member/readHistory/delete. Such manipulation of the argument ids leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14016?
CVE-2025-14016 is considered a high-severity vulnerability due to its potential for remote exploitation and improper authorization.
How do I fix CVE-2025-14016?
To fix CVE-2025-14016, update the macrozheng mall-swarm software to version 1.0.4 or later.
What is affected by CVE-2025-14016?
CVE-2025-14016 affects all versions of macrozheng mall-swarm up to and including 1.0.3.
Can CVE-2025-14016 be exploited remotely?
Yes, CVE-2025-14016 can be exploited remotely due to its vulnerability in the authorization mechanism.
What type of attacks can be performed using CVE-2025-14016?
CVE-2025-14016 allows for improper authorization attacks through the manipulation of IDs in the delete function.