Vulnerability CVE-2023-32757


Published: 2023-08-25

Description:

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

Type:

CWE-434

(Unrestricted Upload of File with Dangerous Type)

 References:
https://www.twcert.org.tw/tw/cp-132-7330-94442-1.html

Copyright 2026, cxsecurity.com

 

Back to Top