TVN ID	TVN-202312017
CVE ID	CVE-2023-48389
CVSS	7.5 (High) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products	EasyLog web+ v1.13.2.8
Description	Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Solution	Please contact Multisuns for fixing method.
Credit	Evans Huang(Chi Jui Huang), Lucas Yang (SIHAN YANG), Kathy Lin (Yi Hsin Lin), Luke Xie(Xie Hung You), Yuru Sung, Robin Chang(Yujen Chang), Leo Yu(Yu Yu Che)
Public Date	2023-12-15