medium6.5
CVE-2024-57435
In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all …
Impact
In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent operations that require authentication, which triggers a denial-of-service attack and service restart failure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Macrozheng | Mall-Tiny | Version 1.0.1 |