CVE-2025-9514

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-9514
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-9514.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-9514
Published
2025-08-27T06:15:32.077Z
Modified
2025-12-02T20:31:21.612433Z
Severity
  • 3.7 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak password requirements. The attack can be executed remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. The vendor deleted the GitHub issue for this vulnerability without and explanation.

References

Affected packages

Git / github.com/macrozheng/mall

Affected ranges

Type
GIT
Repo
https://github.com/macrozheng/mall
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected

Affected versions

v1.*

v1.0.0
v1.0.1
v1.0.2
v1.0.3