CVE-2023-44827 An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script to the Office Convers...
HighCVSS 8.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script to the Office Conversion Settings function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| easycorp zentao | <= 18.6 | No fix listed |
| easycorp zentao biz | <= 8.6 | No fix listed |
| easycorp zentao max | <= 4.7 | No fix listed |
References
- spotted-topaz-6aa.notion.site exploit third-party-advisory