CVE-2024-57435: Macrozheng Mall-Tiny

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent operations that require authentication, which triggers a denial-of-service attack and service restart failure.

Affected products

• Macrozheng Mall-Tiny: version 1.0.1 only

Published 2025-01-31. Last modified 2026-06-17.