VYPR

Force Download function

by U Office

CVEs (1)

  • CVE-2022-39023MedOct 31, 2022
    risk 0.42cvss 6.5epss 0.01

    U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file.