Vulnerability Database

318,251

Total vulnerabilities in the database

CVE-2023-32757

e-Excellence U-Office Force file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker without logging the service can exploit this vulnerability to upload arbitrary files to perform arbitrary command or disrupt service.

  • Published: Aug 25, 2023
  • Updated: Nov 16, 2025
  • CVE: CVE-2023-32757
  • Severity: Critical
  • Exploit:

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
edetw / u-office_force 20.0.7668d 20.0.7668d.x