CVE-2023-39448

2023-09-0508:28:06

jpcert

www.cve.org

shirasagi

path traversal

remote attack

arbitrary code execution

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.4%

JSON

Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.

CNA Affected

[
  {
    "vendor": "SHIRASAGI Project",
    "product": "SHIRASAGI",
    "versions": [
      {
        "version": "prior to v1.18.0 ",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN82758000/

www.ss-proj.org/support/954.html