high8.8
CVE-2024-57434
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control.
Impact
macrozheng mall-tiny 1.0.1 is vulnerable to Incorrect Access Control. The project imports users by default, and the test user is made a super administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Macrozheng | Mall-Tiny | Version 1.0.1 |