CVE:CVE-2023-2738
CNNVD:CNNVD-202305-1516
TONGDA Office Anywhere是一套协同办公OA系统。
TONGDA Office Anywhere 11.10版本存在代码问题漏洞，该漏洞源于文件GatewayController.php的函数actionGetdata存在问题，会导致不受限制的上传。
solution:Upgrade tongda2000 tongda_oa to a higher version than 11.10,and avoid the version 11.10