What’s Vulnerable › Vulnerabilities

CVE-2025-13246: shsuishang ShopSuite ModulithShop JwtAuthenticationFilter.java JwtAuthenticationFilter path traversal

• Severity: medium (CVSS 6.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-16 · updated 2026-10-18
• Weakness: CWE-22

Description

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

Affected products

• shsuishang ShopSuite ModulithShop: 45a99398cec3b7ad7ff9383694f0b53339f2d35a

References

• https://github.com/shsuishang/modulithshop/issues/1
• https://vuldb.com/?ctiid.332580
• https://vuldb.com/?id.332580
• https://vuldb.com/?submit.687532

Get alerted when CVE-2025-13246 or the next vulnerability affects your stack