macrozheng Mall-Tiny Incorrect Access Control Vulnerability in Logout Function

A vulnerability exists in macrozheng mall-tiny version 1.0.1, related to improper access control in the logout function. After a user logs out, their token remains active and can still retrieve information as if the user were logged in.

Impact

Exploitation of this vulnerability allows for session fixation, where a logged-out user's token can be used to access information as if they were still logged in.