CVE-2023-39448 in SHIRASAGI

Tóm tắt

Bởi MITRE • 05/09/2023

Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Đặt trước: 09/08/2023
• Tiết lộ: 05/09/2023
• Kiểm duyệt: được chấp nhận
• mục: VDB-238826
• CPE: sẵn sàng
• CWE: CWE-22 (Đã xác nhận)
• CVSS: 8.8 (NVD)
• EPSS: 0.01070
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-39448
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-39448
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-39448/