CVE-2025-2396: e-Excellence U-Office Force - Arbitrary File Upload
The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
e-Excellence U-Office Forceto a version that resolves this vulnerability.Fixed in 28.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2396?
CVE-2025-2396 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-2396?
To mitigate CVE-2025-2396, ensure that file uploads are properly validated and restricted to safe file types.
Who is affected by CVE-2025-2396?
CVE-2025-2396 affects users of e-Excellence U-Office Force software.
What type of vulnerability is CVE-2025-2396?
CVE-2025-2396 is an Arbitrary File Upload vulnerability that allows attackers to upload malicious files.
What could attackers do by exploiting CVE-2025-2396?
Attackers exploiting CVE-2025-2396 could upload web shell backdoors to execute arbitrary code on the server.