e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-7330-94442-1.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-7330-94442-1.html | Third Party Advisory |
Configurations
History
21 Nov 2024, 08:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.twcert.org.tw/tw/cp-132-7330-94442-1.html - Third Party Advisory |
29 Aug 2023, 20:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.twcert.org.tw/tw/cp-132-7330-94442-1.html - Third Party Advisory | |
| CPE | cpe:2.3:a:edetw:u-office_force:20.0.7668d:*:*:*:*:*:*:* | |
| First Time |
Edetw u-office Force
Edetw |
25 Aug 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-25 08:15
Updated : 2024-11-21 08:03
NVD link : CVE-2023-32757
Mitre link : CVE-2023-32757
CVE.ORG link : CVE-2023-32757
JSON object : View
Products Affected
edetw
- u-office_force
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type