Security Advisory

CVE-2025-63695

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-11-18 00:00:00
Last updated 2025-11-19 16:49:53
Assigner mitre
State PUBLISHED

Description

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.