← Terug naar CVE-database CVE-2025-63695 CRITICAL · 9.8 CVSS Gepubliceerd: 18-11-2025 CWE-434 Beschrijving DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php. Vendors Dzzoffice Affected products Dzzoffice References github.com github.com