High severity8.8NVD Advisory· Published Dec 4, 2023· Updated Jun 17, 2026

CVE-2023-49108

Description

Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). If this vulnerability is exploited, arbitrary files on the server may be obtained or deleted by a user of the product with specific privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

RakRak/RakRak Document Plusllm-create
Range: 3.2.0.0 to 6.4.0.7 (excluding 6.1.1.3a)
Sumitomo Electric Information Systems Co., Ltd./Rakrak Document Plusv5
Range: Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a)

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN46895889/nvdThird Party Advisory
rakrak.jp/RakDocSupport/rkspServletnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000