CVE-2023-49108

HIGH 8.8CVE-2023-49108 · Published 04/12/2023 · updated 17/06/2026

In short

CVE-2023-49108 is a HIGH (CVSS 8.8) vulnerability affecting rakrak document plus (sei-info).
Chance of exploitation in the next 30 days (EPSS): 0.87%, higher than 59.2% of all vulnerabilities.
Fix: update to 6.1.1.3a or later.

Package	Affected versions	Patched versions
rakrak document plus sei-info	`≥ 3.2.0.0, < 6.1.1.3a> 6.1.1.3a, ≤ 6.4.0.7`	`6.1.1.3a`

Description

Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). If this vulnerability is exploited, arbitrary files on the server may be obtained or deleted by a user of the product with specific privileges.

References

jvn.jp/en/jp/JVN46895889 · Third Party Advisory
rakrak.jp/RakDocSupport/rkspServlet · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free