Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-32757 EUVD-2023-36982GHSA-3jvx-f94j-g6fh

e-Excellence U-Office Force - Arbitrary File Upload

Published Aug 25, 2023 · Updated Oct 2, 2024 · Assigned by twcert

Description

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

Affected products

VendorProductAffectedFixed
e-Excellence U-Office Force 20.0.7668D —

References