Rakrak · Rakrak Document Plus · CVE-2023-49108
**Name of the Vulnerable Software and Affected Versions**
RakRak Document Plus versions 3.2.0.0 through 6.4.0.7, excluding version 6.1.1.3a
**Description**
A path traversal vulnerability exists, allowing arbitrary files on the server to be obtained or deleted by a user with specific privileges.
**Recommendations**
For versions 3.2.0.0 through 6.4.0.7, excluding version 6.1.1.3a, update to a version that includes the fix for this issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.