High severity · published Oct 10, 2023
CVE-2023-44827
An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script…
8.8
CVSS
1%
EPSS
No
On KEV
Description
An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script to the Office Conversion Settings function.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ZE
Zentao · Easycorp
through 18.6 · source: NVD
ZB
Zentao Biz · Easycorp
through 8.6 · source: NVD
ZM
Zentao Max · Easycorp
through 4.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-44827
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-44827
Exploit
https://spotted-topaz-6aa.notion.site/Zentao-Authorized-Remote-Code-Execution-Vulnerability-CVE-2023-44827-be731cbe8607496cae35c08cb9ba2436
More from Zentao
9.8
CVE-2024-24216
Zentao v18.0 to v18.10 was discovered to contain a remote code execution (RCE) vulnerability via the checkConnection method of /app/zentao/module/repo/model.php
9.8
CVE-2024-24202
An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 allows attackers to execute arbitrary…
9.8
CVE-2020-28165
The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability
9.1
CVE-2025-5114
easysoft zentaopms Editor index.php edit deserialization
8.8
CVE-2022-47745
ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection