Vulnerability · Published Dec 4, 2023 · Assigned by jpcert
CVE-2023-49108
High 8.8
In plain English
A high-severity security flaw in RakRak Document Plus from Sumitomo Electric Information Systems Co., Ltd.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)0.9%top 40.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). If this vulnerability is exploited, arbitrary files on the server may be obtained or deleted by a user of the product with specific privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Sumitomo Electric Information Systems Co., Ltd. | RakRak Document Plus | Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a) |