CVE-2025-13118: Critical Improper Authorization Vulnerability in macrozheng mall-swarm Exposes Order Data
Overview CVE-2025-13118 is a critical improper authorization vulnerability affecting macrozheng mall-swarm up to version 1.0.3. This vulnerability resides in the paySuccess function of the /order/paySuccess endpoint. Successful exploitation allows a remote attacker to manipulate the orderID argument, potentially gaining unauthorized access to order information and potentially manipulating order status. A public exploit is currently available, … Read more