PT-2025-46827 · Macrozheng · Mall-Swarm+1

Huangweigang · Published 2025-11-13 · Updated 2025-11-25 · CVE-2025-13115

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions macrozheng mall-swarm versions up to 1.0.3 macrozheng mall versions up to 1.0.3

Description A security flaw exists due to improper authorization when manipulating the orderId argument in the function detail of the Order Details Handler component. This flaw is located in the file '/order/detail/'. The attack can be initiated remotely, and the exploit is publicly available. The vendor was informed of this issue but did not respond.

Recommendations Versions up to 1.0.3 should be updated.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2025-13115

Affected Products

Mall

Mall-Swarm

References · 11

• 🔥 https://github.com/Hwwg/cve/issues/6 · Exploit
• 🔥 https://github.com/Hwwg/cve/issues/11 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-13115 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13115 · Vendor Advisory
• https://vuldb.com/?id.332320 · Note
• https://t.me/cveNotify/142904 · Telegram Post
• https://t.me/cveNotify/143975 · Telegram Post
• https://t.me/CVEtracker/37246 · Telegram Post
• https://vuldb.com/?submit.686528 · Note
• https://vuldb.com/?ctiid.332320 · Note
• https://vuldb.com/?submit.683222 · Note