critical9.8
CVE-2025-63695
DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.
Impact
DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dzzoffice | Dzzoffice | through 2.3.7 |