Hangzhou Kuozhi Network Technology Co., Ltd. Vulnerabilities and Affected Products
Vulnerabilities associated with EduSoho.
Products
Clear product- EduSoho1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-7335HIGH | EduSoho < 22.4.7 Arbitrary File Read via classroom-course-statisticsEduSoho versions prior to 22.4.7 contain an arbitrary file read vulnerability in the classroom-course-statistics export functionality. A remote, unauthenticated attacker can supply crafted path traversal sequences in the fileNames[] parameter to read arbitrary files from the server filesystem, including application configuration files such as config/parameters.yml that may contain secrets and database credentials. Exploitation evidence was observed by the Shadowserver Foundation on 2026-01-19 (U… CWE-22Jan 22, 2026 | CVSS8.7v4.0 | EPSS0.738% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |