CVE-2023-38879
Published: 20 November 2023
Summary
CVE-2023-38879 is a high-severity Path Traversal (CWE-22) vulnerability in Os4Ed Opensis. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 6.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-38879 is a path traversal vulnerability, tracked as CWE-22, that affects the Community Edition version 9.0 of OS4ED's openSIS Classic. The flaw resides in the 'filename' parameter of DownloadWindow.php and permits remote attackers to read arbitrary files on the server by supplying crafted directory traversal sequences.
An unauthenticated attacker with network access can exploit the issue to retrieve sensitive files without any user interaction. Successful exploitation yields high confidentiality impact while leaving integrity and availability unaffected, consistent with the CVSS 7.5 rating.
The EPSS score for this CVE rose from a low baseline to a peak of 0.1450 before settling at the current value of 0.1138, indicating that exploitation interest emerged after public disclosure. Public references consist of the openSIS-Classic repository and a dedicated vulnerability-research repository containing further technical details.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-42646
Vulnerability details
The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the 'filename' parameter of 'DownloadWindow.php'.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Validates pathnames and filenames to prevent traversal outside intended directories.