CVE-2023-38879

2023-11-2019:15:08

Google

osv.dev

os4ed

opensis classic

directory traversal

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.3%

JSON

The Community Edition version 9.0 of OS4ED’s openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the ‘filename’ parameter of ‘DownloadWindow.php’.

CPENameOperatorVersion
opensis-responsive-designeqV9.0
opensis-responsive-designeq7.1
opensis-responsive-designeqV7.5
opensis-responsive-designeqer7.4
opensis-responsive-designeq7.2
opensis-responsive-designeq7.3
opensis-responsive-designeqV8.0
opensis-responsive-designeqVer7.0beta1
opensis-responsive-designeqVer7.0Prod_update
opensis-responsive-designeqer7.1

Name	Operator	Version
opensis-responsive-design	eq	V9.0
opensis-responsive-design	eq	7.1
opensis-responsive-design	eq	V7.5
opensis-responsive-design	eq	er7.4
opensis-responsive-design	eq	7.2
opensis-responsive-design	eq	7.3
opensis-responsive-design	eq	V8.0
opensis-responsive-design	eq	Ver7.0beta1
opensis-responsive-design	eq	Ver7.0Prod_update
opensis-responsive-design	eq	er7.1