Threats tagged 'ghsa-vjm2-vp2c-vqmw'

A security vulnerability exists in Jiusi OA up to version 20251102 in the OfficeServer Interface component. The flaw involves manipulation of the FileData argument in the /OfficeServer?isAjaxDownloadTemplate=false endpoint, leading to unrestricted file upload. This vulnerability can be exploited remotely. Public exploit code has been disclosed. The vulnerability has a medium severity rating with a CVSS score of 6.3.