CVE-2023-39448

2023-09-0509:15:08

Google

osv.dev

path traversal

shirasagi

v1.18.0

remote attacker

arbitrary files

arbitrary code execution

software

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.4%

JSON

Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.

CPENameOperatorVersion
shirasagieq1.14.0-RC
shirasagieq1.7.0-RC
shirasagieq1.2.1
shirasagieq1.12.2
shirasagieq1.1.0
shirasagieq1.7.0
shirasagieq0.3.0
shirasagieq0.2.0
shirasagieq1.17.0-RC
shirasagieq1.10.0

Name	Operator	Version
shirasagi	eq	1.14.0-RC
shirasagi	eq	1.7.0-RC
shirasagi	eq	1.2.1
shirasagi	eq	1.12.2
shirasagi	eq	1.1.0
shirasagi	eq	1.7.0
shirasagi	eq	0.3.0
shirasagi	eq	0.2.0
shirasagi	eq	1.17.0-RC
shirasagi	eq	1.10.0