CVE-2025-9514CWE-521

macrozheng mall Registration weak password

Medium · published August 27, 2025

CVSS v4.0
6.3
EPSS
0%
Percentile
32.1
In the wild
Unconfirmed
What it is

A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak password requirements. The attack can be executed remotely. Attacks of this nature are highly complex. The exploitability is said to be difficult. The vendor deleted the GitHub issue for this vulnerability without and explanation.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X
EPSS
0.00392 · 32.1th percentile
Weakness
CWE-521 · Weak Password Requirements
Published
2025-08-27T06:02Z
EPSS history
Timeline
  • 27 AUG 06:02Z
    macrozheng mall Registration weak password
    cvelistv5