CVE-2024-6648 PoC — Path Traversal in AP Page Builder

Source

https://github.com/n0d0n/CVE-2024-6648

Associated Vulnerability

Title: Path Traversal in AP Page Builder (CVE-2024-6648)
Description:Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system.

Readme

# CVE-2024-6648

Nuclei template for CVE-2024-6648, absolute path traversal at Prestashop ApPage Builder plugin.

Usage:

```bash
nuclei -u https://vulnerable.site.com -t CVE-2024-6648.yaml 
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →