Seeyon.Office.Anywhere.htmlofficeservlet.Arbitrary.File.Upload

Description

This indicates an attack attempt to exploit an Arbitrary File Upload Vulnerability in Seeyon Office Anywhere.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote unauthenticated attacker could exploit this vulnerability by uploading and accessing a specially crafted file, which can lead to arbitrary code execution on the vulnerable system.

Affected Products

Seeyon A8-V5 Collaborative Management Software V6. 1sp1
Seeyon A8+ Collaborative Management Software V7. 0, V7. 0sp1, V7. 0sp2, V7. 0sp3
Seeyon A8+ Collaborative Management Software V7. 1

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware any vendor provided patch to address this issue.

References