CVE-2024-8163: Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal
A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 1.6.0 can resolve this issue. You should upgrade the affected component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8163?
CVE-2024-8163 is classified as a critical vulnerability.
How do I fix CVE-2024-8163?
To fix CVE-2024-8163, update Beikeshop to a version greater than 1.5.5.
What kind of attack can exploit CVE-2024-8163?
CVE-2024-8163 can be exploited through path traversal attacks.
Which software versions are affected by CVE-2024-8163?
All versions of Beikeshop up to and including 1.5.5 are affected by CVE-2024-8163.
What functionality is compromised due to CVE-2024-8163?
The vulnerability affects the destroyFiles function in the file manager of Beikeshop.