一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月14日

CVE-2026-109406 [MEDIUM] – A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects

未分类
📑 文章目录

A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.