Skip to content
OpenAdvisories
High · 8.6 CVE-2024-46898 EUVD-2024-42142GHSA-v7c2-v9g9-2768

SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability i…

Published Oct 15, 2024 · Updated Oct 23, 2024 · Assigned by jpcert

Description

SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests.

Affected products

VendorProductAffectedFixed
SHIRASAGI Project SHIRASAGI prior to v1.19.1 —

References