CVE-2024-48694

File Upload vulnerability in Xi’an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute arbitrary code via the pw/savedraw component.

More information : https://avd.aliyun.com/detail?id=AVD-2023-1678930