CVE-2025-8755: macrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization
A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberController.java of the component com.macro.mall.portal.controller. The manipulation of the argument orderId leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8755?
CVE-2025-8755 is classified as a problematic vulnerability affecting the Macrozheng Mall software.
How do I fix CVE-2025-8755?
To remediate CVE-2025-8755, update the Macrozheng Mall software to a version later than 1.0.3.
What component is affected by CVE-2025-8755?
CVE-2025-8755 affects the UmsMemberController.java file within the Macrozheng Mall portal controller.
What type of vulnerability is CVE-2025-8755?
CVE-2025-8755 is an authorization bypass vulnerability that allows manipulation of the argument orderId.
Which versions of Macrozheng Mall are impacted by CVE-2025-8755?
CVE-2025-8755 affects all versions of Macrozheng Mall up to and including 1.0.3.