Null Pointer Dereference in Macrozheng's Mall-Tiny eCommerce Platform

CVE-2024-57435

What is CVE-2024-57435?

In version 1.0.1 of Macrozheng's Mall-Tiny, a flaw exists where an attacker can exploit the resource creation interface by sending null data. This leads to a null pointer dereference during subsequent authenticated operations, potentially causing a denial-of-service condition. The exploit can not only interrupt service availability but also trigger a failure in service restarts, making it critical for users to address this vulnerability promptly.

References