medium6.3
CVE-2026-108785
A flaw has been found in macrozheng mall up to 1.0.3.
Impact
A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticationTokenFilter. This manipulation of the argument token causes session expiration. The attack may be initiated remotely. The exploit has been published and may be used. Patch name: 9bfc2fd2c4aaa4ac519e9152e65d673a5380de1a. To fix this issue, it is recommended to deploy a patch.
Affected products
| Product | Affected versions |
|---|---|
| Macrozheng Mall | before 1.0.3. |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/macrozheng/mall/
- https://github.com/macrozheng/mall/commit/9bfc2fd2c4aaa4ac519e9152e65d673a5380de1a
- https://github.com/macrozheng/mall/issues/997
- https://vuldb.com/cve/CVE-2026-108785
- https://vuldb.com/submit/959284
- https://vuldb.com/vuln/416564
- https://vuldb.com/vuln/416564/cti