high7.5
CVE-2023-48389
Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL.
Impact
Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Multisuns | Easylog Web\+ Firmware | Version 1.13.2.8 |