PT-2024-33182 · Unknown · Officeweb365

Peiqi0 · Published 2024-11-19 · Updated 2024-11-20 · CVE-2024-48694

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OfficeWeb365 versions 7.18.23.0 through 8.6.1.0

Description The issue allows a remote attacker to execute arbitrary code via the "pw/savedraw" component. This enables the attacker to upload files that can lead to code execution, potentially compromising the system.

Recommendations For versions 7.18.23.0 through 8.6.1.0, consider disabling the "pw/savedraw" component to prevent file upload and subsequent code execution until a patch is available. Restrict access to the file upload functionality in the affected versions to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-48694

Affected Products

Officeweb365

References · 9

• 🔥 https://github.com/luck-ying/Library-POC/blob/master/2023HW/2023.8.15/OfficeWeb365_SaveDraw%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.py · Exploit
• https://osv.dev/vulnerability/CVE-2024-48694 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48694 · Security Note
• https://github.com/PeiQi0/PeiQi-WIKI-Book/blob/32024c5dbb7ff60fa7347cccf6ebb3763a513e7a/docs/wiki/webapp/OfficeWeb365/OfficeWeb365%20SaveDraw%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md?plain=1#L24 · Note
• https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/OfficeWeb365-SaveDraw-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md · Note
• https://github.com/xuetang1125/OfficeWeb365/blob/main/OfficeWeb365%20SaveDraw%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%20%282%29.md · Note
• https://t.me/cvedetector/11499 · Telegram Post
• https://avd.aliyun.com/detail?id=AVD-2023-1678930 · Note
• https://twitter.com/CVEnew/status/1859223917828898977 · Twitter Post