CVE-2024-8163CWE-22

Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal

Medium · published August 26, 2024

CVSS v4.0
5.3
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 1.6.0 can resolve this issue. You should upgrade the affected component.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00836 · 57.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-08-26T13:00Z
EPSS history
Timeline
  • 26 AUG 13:00Z
    Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal
    cvelistv5