medium5.4
CVE-2026-109406
A weakness has been identified in macrozheng mall up to 1.0.3.
Impact
A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.
Affected products
| Product | Affected versions |
|---|---|
| Macrozheng Mall | before 1.0.3. |
Versions were read from the advisory text. No structured product data has been published for this record yet.