CVE-2025-8741: macrozheng mall login cleartext transmission
A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8741?
CVE-2025-8741 has been declared as problematic due to its potential to expose sensitive information.
How do I fix CVE-2025-8741?
To fix CVE-2025-8741, update the macrozheng mall software to a version newer than 1.0.3.
What type of information is affected by CVE-2025-8741?
CVE-2025-8741 affects the cleartext transmission of sensitive information through the /admin/login functionality.
Who is affected by CVE-2025-8741?
CVE-2025-8741 affects users of macrozheng mall versions up to and including 1.0.3.
Can CVE-2025-8741 be exploited remotely?
Yes, CVE-2025-8741 can be exploited remotely if an attacker can access the /admin/login endpoint.