CVE-2022-39022

Publication date

2022-10-31 06:40:34

Family

twcert

State

PUBLISHED

Description

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.