Description
An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SHIRASAGI Project | SHIRASAGI | ≤ v1.20.2 | — |