Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-41889

Late-Unicode normalization vulnerability in SHIRASAGI

Description

SHIRASAGI is a Content Management System. Prior to version 1.18.0, SHIRASAGI is vulnerable to a Post-Unicode normalization issue. This happens when a logical validation or a security check is performed before a Unicode normalization. The Unicode character equivalent of a character would resurface after the normalization. The fix is initially performing the Unicode normalization and then strip for all whitespaces and then checking for a blank string. This issue has been fixed in version 1.18.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

shirasagi shirasagi

  • < 1.18.0affected

References