CVE-2026-108784 — macrozheng mall Payment Endpoint AlipayServiceImpl.java AlipayServiceImpl.pay logic error
A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayS…
Published: 2026-10-12 · CVSS: 6.9 · CVSS 4.0
A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServiceImpl.java of the component Payment Endpoint. The manipulation of the argument total_amount results in business logic errors. The attack can be launched remotely. The exploit is now public and may be used. The patch is identified as dcaa93b3150352e5044708d7211b5bed0af4509f. A patch should be applied to remediate this issue.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7