CVE-2023-39448 — SHIRASAGI Project / SHIRASAGI

CVE-2023-39448

SHIRASAGI Project / SHIRASAGI PUBLISHED

Description (CNA)

Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
SHIRASAGI Project / SHIRASAGI	affected prior to v1.18.0

CWE

No CWE identifiers supplied.

References

https://www.ss-proj.org/support/954.html
https://jvn.jp/en/jp/JVN82758000/

ADP enrichment

CVE

No English description supplied.

https://www.ss-proj.org/support/954.html
https://jvn.jp/en/jp/JVN82758000/

CISA-ADP

No English description supplied.

No references supplied.