CVE-2023-32757: falha crítica em e-Excellence U-Office Force
e-Excellence U-Office Force - Arbitrary File Upload
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 0.9%
e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
e-Excellence · U-Office ForceCVEs relacionadas — e-Excellence U-Office Force
No mesmo produto, das mais perigosas para as menos.
CVE-2023-32756HIGHe-Excellence U-Office Force - Path TraversalEPSS 1.2%CVE-2026-3422CRITICALe-Excellence｜U-Office Force - Insecure DeserializationEPSS 0.9%CVE-2025-2396HIGHe-Excellence U-Office Force - Arbitrary File UploadEPSS 0.7%CVE-2023-32755MEDIUMe-Excellence U-Office Force - Error Message LeakageEPSS 0.6%CVE-2025-2395CRITICALe-Excellence U-Office Force - Improper AuthenticationEPSS 0.6%CVE-2025-12865HIGHe-Excellence｜U-Office Force - SQL InjectionEPSS 0.4%