CVE-2024-8165

MEDIO 6.5CVE-2024-8165 · Published 26/08/2024 · updated 17/06/2026

In breve

CVE-2024-8165 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda beikeshop (beikeshop).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.56%, superiore al 47.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
beikeshop beikeshop	`≤ 1.5.5`	No fix yet

Description

A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/file_manager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.6.0 is able to resolve this issue. It is suggested to upgrade the affected component.

References

DeepMountains/Mirage · Broken Link
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

Altre vulnerabilità di beikeshop

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free