Path Traversal Vulnerability in Chengdu Everbrite Network Technology BeikeShop

CVE-2024-8163

Summary

A critical path traversal vulnerability exists in Chengdu Everbrite Network Technology's BeikeShop, specifically in the destroyFiles function located in /admin/file_manager/files. This flaw allows attackers to manipulate the 'files' argument, potentially leading to unauthorized file access and deletion. The vulnerability can be exploited remotely, making it a significant threat to users operating with versions up to 1.5.5. Although the vendor was alerted about this vulnerability, there has been no response, escalating the risk of exploitation as details are publicly available. Organizations using affected versions are strongly advised to apply necessary patches and monitor for suspicious activity to mitigate risks associated with this vulnerability.

References