What’s Vulnerable › Vulnerabilities

CVE-2024-57435

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-01-31 · updated 2026-06-17
• Weakness: CWE-476

Description

In macrozheng mall-tiny 1.0.1, an attacker can send null data through the resource creation interface resulting in a null pointer dereference occurring in all subsequent operations that require authentication, which triggers a denial-of-service attack and service restart failure.

Affected products

• macrozheng Mall-Tiny: 1.0.1

References

• https://github.com/peccc/restful_vul/blob/main/mall_tiny_dos/mall_tiny_dos.md
• https://github.com/peccc/restful_vul/blob/main/mall_tiny_dos/mall_tiny_dos.md

Get alerted when CVE-2024-57435 or the next vulnerability affects your stack