CVE-2023-32756

Summary

e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files, but can’t control system or disrupt service.

Affected Software

Weaknesses

• CWE-22: CWE-22 Path Traversal

ADP Enrichment

CVE Program Container

Additional References

• https://www.twcert.org.tw/tw/cp-132-7329-d8e4c-1.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://www.twcert.org.tw/tw/cp-132-7329-d8e4c-1.html

• ←Previous
• Next→