High severity8.1NVD Advisory· Published Jul 17, 2025· Updated Apr 15, 2026

CVE-2023-41566

Description

OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend.do. This vulnerability allows attackers to obtain the password of the background administrator and further obtain database permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Night 0p/Anhreferences

Patches

Vulnerability mechanics

References

gist.github.com/night-0p/668fc88385d4f60feb90b7fcef8443b1nvd
github.com/night-0p/anh/blob/main/Landray%20OA/FileDownload.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000