CVE-2025-8753: linlinjava litemall File delete path traversal
Published Aug 9, 2025
·Updated
A vulnerability, which was classified as critical, has been found in linlinjava litemall up to 1.8.0. Affected by this issue is the function delete of the file /admin/storage/delete of the component File Handler. The manipulation of the argument key leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
2 affected components
linlinjava litemall<=1.8.0
linlinjava litemall<=1.8.0
Event History
Aug 9, 2025
CVE Published
via MITRE·01:32 PM
Data Sourced
via MITRE·01:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Jun 20, 58473
Event
via NVD·09:09 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-8753?
CVE-2025-8753 is classified as a critical vulnerability.
2
How do I fix CVE-2025-8753?
To fix CVE-2025-8753, upgrade linlinjava litemall to version 1.8.1 or later.
3
What components are affected by CVE-2025-8753?
CVE-2025-8753 affects the File Handler component, specifically the delete function in /admin/storage/delete.
4
What type of vulnerability is CVE-2025-8753?
CVE-2025-8753 is a path traversal vulnerability.
5
What products are impacted by CVE-2025-8753?
CVE-2025-8753 impacts linlinjava litemall versions up to 1.8.0.