High · published December 2, 2025
🚨 A remote attacker can upload any file they want through EverShop’s unprotected /api/images endpoint! 🔥 Think of it as a restaurant kitchen where anyone can stroll in and start adding their own ingredients to the dishes — no checks, no balances! An attacker could upload malicious files, creating fake login panels to steal admin credentials or even launch a denial-of-service attack by filling up disk space. This could lead to a complete server crash or a data breach that puts user credentials at risk!
Think of it as a restaurant kitchen where anyone can stroll in and start adding their own ingredients to the dishes — no checks, no balances! This vulnerability allows unauthenticated users to upload arbitrary files and create directories due to insufficient server-side validation of the uploaded content.
An attacker could upload malicious files, creating fake login panels to steal admin credentials or even launch a denial-of-service attack by filling up disk space. This could lead to a complete server crash or a data breach that puts user credentials at risk! Immediately restrict access to the /api/images endpoint to authenticated users only. Implement rigorous checks on uploaded files to ensure only valid image formats are accepted. Finally, consider upgrading to a patched version once available to prevent future risks. You’ve got this! Follow these steps, and you’ll lock down your EverShop in no time! 🛡️