Skip to content
OpenAdvisories
Unscored CVE-2023-49108 EUVD-2023-53117GHSA-6298-8g5j-5f2x

Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). If this vulnerability is e…

Published Dec 4, 2023 · Updated Aug 2, 2024 · Assigned by jpcert

Description

Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). If this vulnerability is exploited, arbitrary files on the server may be obtained or deleted by a user of the product with specific privileges.

Affected products

VendorProductAffectedFixed
Sumitomo Electric Information Systems RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a) —

References