CVE-2024-0412: DeShang DSShop HTTP GET Request install.php access control

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-01-11 · updated 2026-06-17
Weakness: CWE-284

Description

A vulnerability was found in DeShang DSShop up to 3.1.0. It has been declared as problematic. This vulnerability affects unknown code of the file public/install.php of the component HTTP GET Request Handler. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250432.

Affected products

DeShang DSShop: 3.0, 3.1.0

References

https://note.zhaoj.in/share/Q56cf5nN9RzF
https://vuldb.com/?ctiid.250432
https://vuldb.com/?id.250432
https://note.zhaoj.in/share/Q56cf5nN9RzF
https://vuldb.com/?ctiid.250432
https://vuldb.com/?id.250432

Get alerted when CVE-2024-0412 or the next vulnerability affects your stack