CVE-2023-32756 | THREATINT

Description

e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files, but can’t control system or disrupt service.

Reserved 2023-05-15 | Published 2023-08-25 | Updated 2024-10-02 | Assigner twcert

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-22 Path Traversal

Product status

Default status

unaffected

20.0.7668D

affected

References

www.twcert.org.tw/tw/cp-132-7329-d8e4c-1.html

cve.org (CVE-2023-32756)

nvd.nist.gov (CVE-2023-32756)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.