SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests.
References
| Link | Resource |
|---|---|
| https://github.com/shirasagi/shirasagi/commit/5ac4685d7e4330f949f13219069107fc5d768934 | Patch |
| https://www.ss-proj.org/ | Product |
| https://jvn.jp/en/jp/JVN58721679/ | Third Party Advisory |
Configurations
History
17 Oct 2024, 17:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jvn.jp/en/jp/JVN58721679/ - Third Party Advisory | |
| References | () https://github.com/shirasagi/shirasagi/commit/5ac4685d7e4330f949f13219069107fc5d768934 - Patch | |
| References | () https://www.ss-proj.org/ - Product | |
| CPE | cpe:2.3:a:ss-proj:shirasagi:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Ss-proj
Ss-proj shirasagi |
|
| CWE | CWE-22 |
15 Oct 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-15 07:15
Updated : 2024-10-17 17:52
NVD link : CVE-2024-46898
Mitre link : CVE-2024-46898
JSON object : View
Products Affected
ss-proj
- shirasagi
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')