A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been declared as problematic. Affected by this vulnerability is an unknown part of the file api/config/params.php of the component API. The manipulation of the argument JWT_KEY_ADMIN with an unknown input leads to a hard-coded key vulnerability. The CWE definition for the vulnerability is CWE-321. The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered. As an impact it is known to affect confidentiality.

The weakness was disclosed 02/06/2024. The advisory is shared at note.zhaoj.in. This vulnerability is known as CVE-2024-1258. Technical details and also a public exploit are known. MITRE ATT&CK project uses the attack technique T1600.001 for this issue.

It is possible to download the exploit at note.zhaoj.in. It is declared as proof-of-concept. By approaching the search of inurl:api/config/params.php it is possible to find vulnerable targets with Google Hacking.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Juanpao

Name

• JPShop

Version

• 1.5.02

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #277418: JPShop JPShop <=1.5.02 Auth-Bypass (by glzjin)

Discussion