CVE-2025-2651: SourceCodester Online Eyewear Shop admin exposure of information through directory listing
A vulnerability, which was classified as problematic, was found in SourceCodester Online Eyewear Shop 1.0. Affected is an unknown function of the file /oews/admin/. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. Multiple sub-directories are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable directory listing for the /oews/admin/ path (including all affected sub-directories) to prevent information exposure via directory listing.
SourceCodester Online Eyewear Shop 1.0 (/oews/admin/) Directory listing = disable
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2651?
CVE-2025-2651 is classified as problematic due to its potential for information exposure through directory listing.
How do I fix CVE-2025-2651?
To mitigate CVE-2025-2651, restrict directory listing and ensure proper configuration of the file permissions on the server.
Which software is affected by CVE-2025-2651?
CVE-2025-2651 affects SourceCodester Online Eyewear Shop version 1.0.
What type of vulnerability is CVE-2025-2651?
CVE-2025-2651 is an information exposure vulnerability that allows remote attackers to access sensitive directory listings.
Can CVE-2025-2651 be exploited remotely?
Yes, CVE-2025-2651 can be exploited remotely by an attacker to expose information through directory listings.