Lucene search

GoogleOSV:CVE-2023-38879

HistoryNov 20, 2023 - 7:15 p.m.

CVE-2023-38879

2023-11-2019:15:08

Google

osv.dev

os4ed

opensis classic

directory traversal

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.0%

JSON

The Community Edition version 9.0 of OS4ED’s openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the ‘filename’ parameter of ‘DownloadWindow.php’.

CPENameOperatorVersion
opensis-responsive-designeqV8.0
opensis-responsive-designeqV9.0
opensis-responsive-designeqV7.5
opensis-responsive-designeq7.1
opensis-responsive-designeqVer7.0beta1
opensis-responsive-designeqer7.4
opensis-responsive-designeqer7.1
opensis-responsive-designeq7.3
opensis-responsive-designeqV7.6
opensis-responsive-designeqVer7.0Prod

Name	Operator	Version
opensis-responsive-design	eq	V8.0
opensis-responsive-design	eq	V9.0
opensis-responsive-design	eq	V7.5
opensis-responsive-design	eq	7.1
opensis-responsive-design	eq	Ver7.0beta1
opensis-responsive-design	eq	er7.4
opensis-responsive-design	eq	er7.1
opensis-responsive-design	eq	7.3
opensis-responsive-design	eq	V7.6
opensis-responsive-design	eq	Ver7.0Prod

Rows per page:

1-10 of 121

References

github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-38879

github.com/OS4ED/openSIS-Classic

www.os4ed.com/

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

41.0%

JSON

Related for OSV:CVE-2023-38879