Skip to content
OpenAdvisories
High · 7.5 CVE-2023-48389 EUVD-2023-52441GHSA-j3w9-v397-f6wg

Multisuns EasyLog web+ - Path Traversal

Published Dec 15, 2023 · Updated Dec 2, 2024 · Assigned by twcert

Description

Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.

Affected products

VendorProductAffectedFixed
Multisuns EasyLog web+ 1.13.2.8 —

References