CVE-2024-8165

CVE-2024-8165 is a path traversal vulnerability affecting Chengdu Everbrite Network Technology BeikeShop versions up to 1.5.5, specifically within the exportZip function of the /admin/file_manager/export file. This vulnerability allows an authenticated attacker to remotely manipulate the 'path' argument, potentially leading to unauthorized access to sensitive information. With a CVSS score of 6.5 (Medium), it presents a moderate risk due to its low attack complexity and high confidentiality impact, though it requires authentication. An exploit is publicly available, increasing the risk of exploitation, but there is currently no evidence of active exploitation, Metasploit modules, or significant community discussion.