CVE Catalog
CVE-2023-34798
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.71%
49th percentile - higher than 49% of all known CVEs
Summary
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.
Risk Assessment
This vulnerability could lead to remote code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to update the eoffice software to version 9.5 or later to mitigate this vulnerability.
Original NVD description (English source)
An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.