CVE-2023-32757 — e-Excellence U-Office Force - Arbitrary File Upload

CVE-2023-32757

e-Excellence U-Office Force - Arbitrary File Upload PUBLISHED

Description (CNA)

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

Affected (CNA)

Vendor / product	Versions
e-Excellence / U-Office Force	affected 20.0.7668D

CWE

CWE-434

References

https://www.twcert.org.tw/tw/cp-132-7330-94442-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-7330-94442-1.html

CISA-ADP

No English description supplied.

No references supplied.