Threats tagged 'ghsa-4qjp-r564-vfh5'

DzzOffice versions 2.3.7 and earlier contain a critical vulnerability that allows arbitrary file upload via the /dzz/system/ueditor/php/controller.php endpoint. This flaw can lead to full system compromise due to the high severity of the impact.