High severity8.8NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026

CVE-2023-44827

Description

An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script to the Office Conversion Settings function.

Affected products

ZenTao/ZenTao Community Editiondescription
Zentao/Zentaollm-fuzzy
Range: <=8.6
Zentao/ZenTao Community Editionllm-create
Range: <=18.6
Easycorp/Zentao
cpe:2.3:a:easycorp:zentao:*:*:*:*:community:*:*:*
Range: <=18.6
Easycorp/Zentao Biz
cpe:2.3:a:easycorp:zentao_biz:*:*:*:*:*:*:*:*
Range: <=8.6
Easycorp/Zentao Max
cpe:2.3:a:easycorp:zentao_max:*:*:*:*:*:*:*:*
Range: <=4.7

Patches

Vulnerability mechanics

References

spotted-topaz-6aa.notion.site/Zentao-Authorized-Remote-Code-Execution-Vulnerability-CVE-2023-44827-be731cbe8607496cae35c08cb9ba2436nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000