NetSight
high8.8

CVE-2023-49108

Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a).

Impact

Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). If this vulnerability is exploited, arbitrary files on the server may be obtained or deleted by a user of the product with specific privileges.

Affected products

VendorProductAffected versions
Sei-InfoRakrak Document Plus
from 3.2.0.0 before 6.1.1.3a
after 6.1.1.3a through 6.4.0.7

Weakness classification

References