CVE-2026-109406 — macrozheng mall mall-portal generateOrder OmsPortalOrderServiceImpl logic error
A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the componen…
Published: 2026-10-13 · CVSS: 5.3 · CVSS 4.0
A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component mall-portal. This manipulation of the argument coupon_amount/pay_amount causes business logic errors. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7