PT-2025-3439

Name of the Vulnerable Software and Affected Versions macrozheng mall-tiny version 1.0.1 Description The issue concerns insecure permissions in the application. Specifically, the JWT signing keys are hardcoded and do not change. User information is explicitly written into the JWT and used for...