CVE-2024-37777

O2OA v9.0.3 was discovered to contain a remote code execution RCE vulnerability via the mainOutput function...

CVE-2024-37777

O2OA v9.0.3 was discovered to contain a remote code execution RCE vulnerability via the mainOutput function...

CVE-2024-37777

O2OA v9.0.3 was discovered to contain a remote code execution RCE vulnerability via the mainOutput function...

CVE-2024-37777

The enterprise application development platform O2OA version 9.0.3 is vulnerable to remote code execution (RCE) . The flaw originates from the mishandling of the mainOutput() function , which is associated with improper input validation (CWE-20) and improper control of generation of code (CWE-94)...