Description (CNA)
An authorization bypass vulnerability exists in SHIRASAGI through a user-controlled key, which may allow an unauthorized attacker to retrieve files from the groupware's shared file feature.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SHIRASAGI Project / SHIRASAGI | affected 0 through v1.20.2 |
CWE
CWE-639
References
ADP enrichment
No English description supplied.
No references supplied.