CVE-2024-8163

HOCH 8.1CVE-2024-8163 · Published 26/08/2024 · updated 17/06/2026

Kurz gesagt

CVE-2024-8163 ist eine Schwachstelle (HOCH (CVSS 8.1)) in beikeshop (beikeshop).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.84%, höher als bei 57.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
beikeshop beikeshop	`≤ 1.5.5`	No fix yet

Description

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 1.6.0 can resolve this issue. You should upgrade the affected component.

References

DeepMountains/zzz · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Weitere Schwachstellen in beikeshop

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free