Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-48390 EUVD-2023-52442GHSA-775f-36w2-wxm2

Multisuns EasyLog web+ - Command Injection

Published Dec 15, 2023 · Updated Aug 2, 2024 · Assigned by twcert

Description

Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service.

Affected products

VendorProductAffectedFixed
Multisuns EasyLog web+ 1.13.2.8 —

References