CVE-2023-2738

Tongda OA 11.10 is affected by CVE-2023-2738 via the actionGetdata function in GatewayController.php, enabling unrestricted file upload. The issue can be exploited remotely and the exploit has been publicly disclosed. Connected sources also note that a practical workaround exists: temporarily dis...