CVE-2026-79406

macrozheng mall (open-source e-commerce platform) versions up to 1.0.3 contain a business logic error in the function OmsCartItemServiceImpl.updateQuantity , accessible via the endpoint /cart/update/quantity . Manipulating the quantity argument allows a remote, authenticated attacker to trigger l...