An arbitrary file overwrite flaw exists in MaruNuri LLC version 2.0.23. The flaw permits an attacker to replace critical internal files during a file import routine. By controlling which files are overwritten, an attacker could execute malicious code or disclose sensitive information, undermining both confidentiality and integrity of the system.

The vulnerability affects MaruNuri LLC’s software, version 2.0.23. No other affected vendors or product versions are listed. Users running this specific release should be aware of the risk.

The risk is high due to the ability to overwrite system files, which can lead to full compromise of the application and potentially the underlying host. No explicit CVSS score is provided, but the nature of the flaw suggests severe impact. Epistemic exploitation probability is unknown as EPSS data is unavailable. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves an authenticated or unauthenticated user submitting a crafted import file to the application, though the precise prerequisites are not detailed in the available information.