VULNERABILITY INTELLIGENCE
CVE-2025-9514
CVSS score3.7 LOW
EPSS probability0.41%
CISA KEVNot currently listed
Published2025-08-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak password requirements. The attack can be executed remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. The vendor deleted the GitHub issue for this vulnerability without and explanation.
Weakness classification
- cna@vuldb.com: CWE-521
Primary references
- cna@vuldb.com — Not Applicable
- cna@vuldb.com — Permissions Required, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry