CVE-2022-39023

Publication date

2022-10-31 06:40:35

Family

twcert

State

PUBLISHED

Description

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.