TVN ID	TVN-202312018
CVE ID	CVE-2023-48390
CVSS	9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	EasyLog web+ v1.13.2.8
Description	Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service.
Solution	Please contact Multisuns for fixing method.
Credit	Evans Huang(Chi Jui Huang), Lucas Yang (SIHAN YANG), Kathy Lin (Yi Hsin Lin), Luke Xie(Xie Hung You), Yuru Sung, Robin Chang(Yujen Chang), Leo Yu(Yu Yu Che)
Public Date	2023-12-15