Improper Authentication Management in Macrozheng Mall Admin Login
CVE-2025-8742

6.3MEDIUM

Key Information:

Vendor

Macrozheng

Status
Mall
Vendor
CVE Published:
8 August 2025

What is CVE-2025-8742?

A vulnerability exists within the Macrozheng Mall version 1.0.3 related to the Admin Login component. This flaw allows for improper management of authentication attempts, which could potentially lead to unauthorized access. Although the exploitation complexity is high and presents challenges for attackers, the possibility of a remote attack raises significant concerns. Given that the vendor has not provided a timely response regarding this security issue, users of Macrozheng Mall should take proactive measures to mitigate risks associated with excessive authentication attempts.

Affected Version(s)

mall 1.0.3

References

https://vuldb.com/?id.319238
vdb-entry
https://vuldb.com/?ctiid.319238
signaturepermissions-required
https://vuldb.com/?submit.623319
third-party-advisory

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-8742 : Improper Authentication Management in Macrozheng Mall Admin Login