CVE-2023-34798

CRITICAL 9.8CVE-2023-34798 · Published 25/07/2023 · updated 17/06/2026

In short

CVE-2023-34798 is a CRITICAL (CVSS 9.8) vulnerability affecting e-office (weaver).
Chance of exploitation in the next 30 days (EPSS): 0.78%, higher than 55.8% of all vulnerabilities.
Fix: update to 9.5 or later.

Package	Affected versions	Patched versions
e-office weaver	`< 9.5`	`9.5`

An arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.