Vulnerability in Chengdu Everbrite Network Technology BeikeS… (CVE-2026-11462, CVSS 7.3)

Summary

Vulnerability in Chengdu Everbrite Network Technology BeikeShop (CVE-2026-11462). Risk of unauthorized operations or information disclosure.

Original description

The description as published by the source.

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.6.0.22. This impacts the function callback of the file plugins/Stripe/Controllers/StripeController.php of the component Stripe Plugin. Performing a manipulation of the argument Request results in improper authorization. The attack can be initiated remotely. The exploit has been made public and could be used. The patch is named 6719e0fc690ea0a998452092862e0f0a17c65968. It is suggested to install a patch to address this issue.

Source: NIST National Vulnerability Database NVD GitHub Advisory

AI summary

Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.

Chengdu Everbrite Network TechnologyのBeikeShopバージョン1.6.0.22までに、プラグインStripeの不適切な認証の脆弱性が発見されました。特に、plugins/Stripe/Controllers/StripeController.phpにおけるリクエスト引数の操作が問題です。この脆弱性は遠隔で悪用可能です。修正パッチが公開されており、インストールが推奨されています。

❓ What is the problem

Chengdu Everbrite Network Technology BeikeShopにおけるStripeプラグインの不適切な認証の脆弱性。

📍 Affected scope

ファイルplugins/Stripe/Controllers/StripeController.php内のStripe Plugin。

🔥 Severity

遠隔での攻撃が可能であり、高度な脆弱性である。

🔧 How to fix

修正パッチをインストールすること。パッチ名は6719e0fc690ea0a998452092862e0f0a17c65968。

🛡️ Workaround

情報なし

🔍 Detection

パッチの適用状況を確認すること。

Summary

Original description

AI summary

References