CVE-2025-13246

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

• CWE-22

• https://github.com/shsuishang/modulithshop/issues/1
• https://vuldb.com/?ctiid.332580
• https://vuldb.com/?id.332580
• https://vuldb.com/?submit.687532

Published

Nov 16, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13240A vulnerability was detected in code-projects Student Inform…9.8
• CVE-2025-13241A flaw has been found in code-projects Student Information S…9.8
• CVE-2025-13242A vulnerability has been found in code-projects Student Info…9.8
• CVE-2025-13243A vulnerability was found in code-projects Student Informati…8.8
• CVE-2025-13244A vulnerability was determined in code-projects Student Info…6.1
• CVE-2025-13245A vulnerability was identified in code-projects Student Info…5.4
• CVE-2025-13247A security flaw has been discovered in PHPGurukul Tourism Ma…9.8
• CVE-2025-13248A weakness has been identified in SourceCodester Patients Wa…9.8
• CVE-2025-13249A security vulnerability has been detected in Jiusi OA up to…6.3
• CVE-2025-1325The WP-Recall – Registration, Profile, Commerce & More plugi…6.3
• CVE-2025-13250A vulnerability was detected in WeiYe-Jing datax-web up to 2…8.8
• CVE-2025-13251A flaw has been found in WeiYe-Jing datax-web up to 2.1.2. A…8.8