Vulnerability · Published Aug 27, 2025 · Assigned by VulDB

CVE-2025-9514macrozheng mall Registration weak password

Low 3.7

In plain English

A low-severity security flaw in mall from macrozheng. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).

Severity (CVSS 3.1)3.7Low

Exploit odds (30 days)0.4%top 64.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak password requirements. The attack can be executed remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. The vendor deleted the GitHub issue for this vulnerability without and explanation.

Affected products (as reported)

Vendor	Product	Versions
macrozheng	mall	1.0.01.0.11.0.21.0.3

Weakness: CWE-521 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:R

References

VDB-321507 | macrozheng mall Registration weak password vdb-entry
VDB-321507 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
Submit #635503 | macrozheng mall ≤ v1.0.3 CWE-521 third-party-advisory
https://github.com/macrozheng/mall/issues/923 issue-tracking