Unscored CVE-2023-39448 EUVD-2023-43171GHSA-88x4-2pcq-v5mg

Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the…

Published Sep 5, 2023 · Updated Sep 30, 2024 · Assigned by jpcert

Vendor: SHIRASAGI Project Product: SHIRASAGI

Description

Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.

Affected products

Vendor	Product	Affected	Fixed
SHIRASAGI Project	SHIRASAGI	prior to v1.18.0	—

References

https://www.ss-proj.org/support/954.html
https://jvn.jp/en/jp/JVN82758000/