CVE-2023-32756: e-Excellence U-Office Force - Path Traversal

Published Aug 25, 2023

Updated

e-Excellence U-Office Force has a path traversal vulnerability within its file uploading and downloading functions. An unauthenticated remote attacker can exploit this vulnerability to read arbitrary system files, but can’t control system or disrupt service.

Affected Software

1 affected component

Edetw U-office Force=20.0.7668d

Remediation

Information

Update version to 24.50SP1 or later.

Event History

Aug 25, 2023

CVE Published

via MITRE·07:14 AM

Data Sourced

via MITRE·07:14 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-32756?

CVE-2023-32756 is classified as a medium severity vulnerability due to its potential to allow unauthorized access to sensitive files.

How do I fix CVE-2023-32756?

To fix CVE-2023-32756, update the U-Office Force software to version 20.0.7668d or later as recommended by the vendor.

Who can be affected by CVE-2023-32756?

Any user or system running Edetw U-Office Force version 20.0.7668d is vulnerable to CVE-2023-32756.

What type of attack does CVE-2023-32756 enable?

CVE-2023-32756 enables an unauthenticated remote attacker to exploit the vulnerability to read arbitrary system files.

Can CVE-2023-32756 lead to a denial of service?

No, CVE-2023-32756 does not allow an attacker to control systems or disrupt services.