Description

OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend.do. This vulnerability allows attackers to obtain the password of the background administrator and further obtain database permissions.

INFO

Published Date :

2025-07-17T00:00:00.000Z

Last Modified :

2025-07-17T15:39:29.572Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2023-41566 vulnerability.

No data.

REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-41566.

CVSS Vulnerability Scoring System