PT-2025-32439 · Linlinjava · Litemall

Ez-Lbz

·

CVE-2025-8753

·

Publicado

2025-08-09

·

Atualizado

2025-08-12

CVSS v2.0

5.5

Média

VetorAV:N/AC:L/Au:S/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions: linlinjava litemall versions up to 1.8.0
Description: A critical issue exists in linlinjava litemall up to version 1.8.0 related to path traversal. The delete function within the File Handler component, located at the /admin/storage/delete API endpoint, is affected. Manipulation of the key parameter can lead to unauthorized file deletion. The exploit has been publicly disclosed.
Recommendations: linlinjava litemall versions prior to 1.8.0 should be used.

Exploit

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-8753

Produtos afetados

Litemall