CVE-2024-8165: Chengdu Everbrite Network Technology BeikeShop export exportZip path traversal
A vulnerability was identified in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. This vulnerability affects the function exportZip of the file /admin/filemanager/export. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.6.0 is able to resolve this issue. It is suggested to upgrade the affected component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8165?
CVE-2024-8165 is classified as a problematic vulnerability affecting Beikeshop versions up to 1.5.5.
How do I fix CVE-2024-8165?
To fix CVE-2024-8165, it is recommended to update Beikeshop to a version higher than 1.5.5.
What is the impact of CVE-2024-8165?
The impact of CVE-2024-8165 includes potential path traversal exploitation through the exportZip function in the file manager.
Which versions of Beikeshop are affected by CVE-2024-8165?
CVE-2024-8165 affects all versions of Beikeshop up to and including 1.5.5.
What is path traversal in the context of CVE-2024-8165?
In the context of CVE-2024-8165, path traversal allows an attacker to access files and directories outside of the intended directory structure.