CVE-2023-44827

HIGH 8.8CVE-2023-44827 · Published 10/10/2023 · updated 17/06/2026

In short

CVE-2023-44827 is a HIGH (CVSS 8.8) vulnerability affecting zentao (easycorp), zentao biz (easycorp), zentao max (easycorp).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
zentao easycorp	`≤ 18.6`	No fix yet
zentao biz easycorp	`≤ 8.6`	No fix yet
zentao max easycorp	`≤ 4.7`	No fix yet

Description

An issue in ZenTao Community Edition v.18.6 and before, ZenTao Biz v.8.6 and before, ZenTao Max v.4.7 and before allows an attacker to execute arbitrary code via a crafted script to the Office Conversion Settings function.

References

spotted-topaz-6aa.notion.site/Zentao-Authorized-Remote-Code-Execution-Vulnerability-CVE-2023-44827-be731cbe8607496cae35c08cb9ba2436 · Exploit

More vulnerabilities in zentao

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

zentao

easycorp

≤ 18.6

No fix yet

zentao biz

easycorp

≤ 8.6

No fix yet

zentao max

easycorp

≤ 4.7

No fix yet

More vulnerabilities in zentao

See all →