The vulnerability identified as CVE-2024-54362 affects boggibill GetShop ecommerce software versions up to 1.3. It is a path traversal issue where specially crafted path input containing '.../...//' sequences can bypass normal directory restrictions, potentially allowing unauthorized access to sensitive files on the server. The CVSS 3.1 base score of 8.1 reflects a high severity with network attack vector, high impact on confidentiality, integrity, and availability, and no required privileges or user interaction for exploitation. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to read or modify files outside the web root directory, potentially leading to disclosure of sensitive information, unauthorized data modification, or disruption of service. The high CVSS score indicates a critical impact on confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected application, applying web application firewall rules to detect and block path traversal patterns, and limiting file system permissions to minimize potential damage.