High · published December 5, 2025
⚡ A sneaky parameter is all it takes to delete any file on the server! The /goods/deleteGoods endpoint lets an authenticated attacker have their way, just by manipulating how files are selected. 🔥 Think of this like a restaurant where any waiter can throw away any dish just by saying its name, even if it’s a special order meant for a customer — there’s no check on what can be taken out! An attacker could maliciously delete critical files from the server, potentially crippling operations or destroying valuable data. This means that even if you’re logged in, a bad actor can wreak havoc just by knowing how to exploit this endpoint.
Think of this like a restaurant where any waiter can throw away any dish just by saying its name, even if it’s a special order meant for a customer — there’s no check on what can be taken out! This vulnerability arises because the goodsimg parameter in the /goods/deleteGoods endpoint directly manipulates the file path for deletion without proper validation, allowing for directory traversal attacks.
An attacker could maliciously delete critical files from the server, potentially crippling operations or destroying valuable data. This means that even if you’re logged in, a bad actor can wreak havoc just by knowing how to exploit this endpoint. To remediate this, validate and sanitize the goodsimg parameter before using it in any file operations. Additionally, consider implementing authorization checks to ensure users can only delete files they own. Patch your Warehouse Management System to the latest version as soon as possible! You've got this! Follow these steps, and you’ll have your system secured in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| yeqifu/warehouse_management_system | ≤ 1.2 | — |