CVE-2023-2738

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-2738 Tongda OA GatewayController.php actionGetdata unrestricted upload

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-2738

Tongda OA 11.10 is affected by CVE-2023-2738 via the actionGetdata function in GatewayController.php, enabling unrestricted file upload. The issue can be exploited remotely and the exploit has been publicly disclosed. Connected sources also note that a practical workaround exists: temporarily dis...