{"id":"CVE-2026-36767","aliases":["EUVD-2026-26401","GHSA-f5w4-7ccj-5m75"],"status":"published","title":"Shopizer has a path traversal issue","description":"A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00412,"percentile":0.35718,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2026-04-30T00:00:00Z","modified":"2026-06-17T10:41:15Z","affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.shopizer:shopizer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.16.0"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.shopizer:shopizer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.16.0"}]}],"versions":["2.16.0"]}],"references":[{"url":"https://github.com/shopizer-ecommerce/shopizer","tags":["package"]},{"url":"https://github.com/shopizer-ecommerce/shopizer/issues/1091","tags":["exploit","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-36767","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f5w4-7ccj-5m75"}],"sources":{"cve":[{"id":"CVE-2026-36767","description":"A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.","status":"published","published":"2026-04-30T00:00:00Z","modified":"2026-04-30T17:37:10.57Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:19:55.176387Z"}],"euvd":[{"id":"EUVD-2026-26401","description":"A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.","status":"published","published":"2026-04-30T00:00:00Z","modified":"2026-04-30T17:37:10Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:05:18.723006Z"}],"ghsa":[{"id":"GHSA-f5w4-7ccj-5m75","title":"Shopizer has a path traversal issue","description":"A path traversal vulnerability in the /content/images/add endpoint of shopizer through version 3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.","status":"published","published":"2026-04-30T18:30:32Z","modified":"2026-05-07T01:19:29Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:40:02.883746Z"}],"nvd":[{"id":"CVE-2026-36767","description":"A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.","status":"published","published":"2026-04-30T17:16:26.267Z","modified":"2026-06-17T10:41:15.303Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:12:16.626888Z"}],"osv":[{"id":"GHSA-f5w4-7ccj-5m75","title":"Shopizer has a path traversal issue","description":"A path traversal vulnerability in the /content/images/add endpoint of shopizer through version 3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.","status":"published","published":"2026-04-30T18:30:32Z","modified":"2026-05-07T01:41:24.850132Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:46.006631Z"}]}}