RULE(RULE ID:337893)

Rule General Information
Release Date: 2024-04-02
Rule Name: Tongda OA get_file.php Arbitrary File Download Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Tongda OA is a collaborative office automation system independently developed by Beijing Tongda Xinke Technology Co., LTD. Its get_file.php web page has any file download vulnerability, and attackers can download any file from the server through the vulnerability. This rule may contain false positives. If normal services are affected, you are advised to disable this rule.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.