Lucene search

GoogleOSV:CVE-2023-44827

HistoryOct 10, 2023 - 3:15 a.m.

CVE-2023-44827

2023-10-1003:15:09

Google

osv.dev

cve-2023-44827

zentao community edition

zentao biz

zentao max

office conversion settings

arbitrary code execution

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.1%

JSON

An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script to the Office Conversion Settings function.

CPENameOperatorVersion
zentaopmseqzentaopms_12.4.4_20201030
zentaopmseqzentaopms_11.5.1_20190624
zentaopmseqzentaopms_10.5.stable_20181025
zentaopmseqzentaopms_8.1.3_20160323
zentaopmseqzentaopms_17.8
zentaopmseqzentaopms_18.5
zentaopmseqzentaopms_20.0._20201022
zentaopmseqzentaopms_9.1.1_20170410
zentaopmseqzentaopms_15.6_20211012
zentaopmseqzentaopms_18.0

Name	Operator	Version
zentaopms	eq	zentaopms_12.4.4_20201030
zentaopms	eq	zentaopms_11.5.1_20190624
zentaopms	eq	zentaopms_10.5.stable_20181025
zentaopms	eq	zentaopms_8.1.3_20160323
zentaopms	eq	zentaopms_17.8
zentaopms	eq	zentaopms_18.5
zentaopms	eq	zentaopms_20.0._20201022
zentaopms	eq	zentaopms_9.1.1_20170410
zentaopms	eq	zentaopms_15.6_20211012
zentaopms	eq	zentaopms_18.0

Rows per page:

1-10 of 1941

References

spotted-topaz-6aa.notion.site/Zentao-Authorized-Remote-Code-Execution-Vulnerability-CVE-2023-44827-be731cbe8607496cae35c08cb9ba2436

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.1%

JSON

Related for OSV:CVE-2023-44827