{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unknown",
          "product": "InnoShop",
          "vendor": "InnoShop",
          "versions": [
            {
              "lessThanOrEqual": "0.4.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Innoshop through 0.4.1 allows directory traversal via FileManager API endpoints. An authenticated attacker with access to the admin panel could abuse this to: (1) fully map the filesystem structure via the /api/file_manager/files?base_folder= endpoint, (2) create arbitrary directories on the server via the /api/file_manager/directories endpoint, (3) read arbitrary files from the server by copying the file to a readable location within the application via the /api/file_manager/copy_files endpoint, {4) delete arbitrary files from the server via a DELETE request to /api/file_manager/files, or (5) create arbitrary files on the server by uploading them and then leveraging the /api/file_manager/move_files endpoint to move them anywhere in the filesystem."
    },
    {
      "lang": "es",
      "value": "Innoshop, hasta la versi\u00f3n 0.4.1, permite Directory Traversal mediante los endpoints de la API de FileManager. Un atacante autenticado con acceso al panel de administraci\u00f3n podr\u00eda aprovechar esta funci\u00f3n para: (1) mapear completamente la estructura del sistema de archivos mediante el endpoint /api/file_manager/files?base_folder=, (2) crear directorios arbitrarios en el servidor mediante el endpoint /api/file_manager/directories, (3) leer archivos arbitrarios del servidor copi\u00e1ndolos a una ubicaci\u00f3n legible dentro de la aplicaci\u00f3n mediante el endpoint /api/file_manager/copy_files, (4) eliminar archivos arbitrarios del servidor mediante una solicitud DELETE a /api/file_manager/files, o (5) crear archivos arbitrarios en el servidor subi\u00e9ndolos y luego utilizando el endpoint /api/file_manager/move_files para moverlos a cualquier parte del sistema de archivos."
    }
  ],
  "id": "CVE-2025-52922",
  "lastModified": "2026-06-17T09:37:17.140",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 7.4,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 3.7,
        "source": "cve@mitre.org",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-52922",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-06-23T13:51:08.270086Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-06-23T12:15:23.150",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "https://github.com/innocommerce/innoshop"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://medium.com/@The_Hiker/how-i-found-multiple-cves-in-innoshop-0-4-1-12c8f84ad87f"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-23"
        }
      ],
      "source": "cve@mitre.org",
      "type": "Secondary"
    }
  ]
}