CVE-2024-46898

Publication date

2024-10-15 06:10:30

Family

jpcert

State

PUBLISHED

Description

SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests.