CVE-2025-13249

A security vulnerability has been detected in Jiusi OA up to 20251102. This affects an unknown function of the file /OfficeServer?isAjaxDownloadTemplate=false of the component OfficeServer Interface. Such manipulation of the argument FileData leads to unrestricted upload. The attack can be launch...

EUVD-2025-197726

A security vulnerability has been detected in Jiusi OA up to 20251102. This affects an unknown function of the file /OfficeServer?isAjaxDownloadTemplate=false of the component OfficeServer Interface. Such manipulation of the argument FileData leads to unrestricted upload. The attack can be launch...

CVE-2025-13249

Jiusi OA fixes unrevealed function in OfficeServer Interface where manipulating FileData in /OfficeServer?isAjaxDownloadTemplate=false enables unrestricted upload. Affects Jiusi OA up to 20251102 and can be exploited remotely; exploit has been publicly disclosed. Remediation per sources is to upd...

PT-2025-47084

Name of the Vulnerable Software and Affected Versions Jiusi OA versions prior to 20251103 Description A security issue has been identified in Jiusi OA. The issue involves unrestricted upload capabilities through manipulation of the FileData argument within an unknown function of the...