VulnerabilityModified
CVE-2024-8163
A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5.
LOW 2.1EPSS 0.84%
Does this matter?
Lower severity and a low EPSS score (0.84%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/file_manager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 1.6.0 can resolve this issue. You should upgrade the affected component.
- CVSS 4.0
- 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.84% probability · 56th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- beikeshop/beikeshop
- Source
- cna@vuldb.com
References
- https://github.com/DeepMountains/zzz/blob/main/CVE4-1.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.275761Permissions Required
- https://vuldb.com/?id.275761Third Party Advisory
- https://vuldb.com/?submit.393374Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.