CVE-2025-63695

Published November 18th, 2025

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

2

PROJECTS

Description

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.

zyx0814/dzzoffice

dzzoffice

GitHub

4.03K

Yohane-Mashiro/dzzoffice_upload

dzzoffice 文件上传导致xss

GitHub

2