{"affected":[{"defaultStatus":"unaffected","ecosystem":"github","packageName":"edusoho/edusoho","product":"EduSoho","source":"CNA: VulnCheck","vendor":"Hangzhou Kuozhi Network Technology Co., Ltd.","versions":[{"lessThan":"22.4.7","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2023-7335","cwes":["CWE-22"],"description":"EduSoho versions prior to 22.4.7 contain an arbitrary file read vulnerability in the classroom-course-statistics export functionality. A remote, unauthenticated attacker can supply crafted path traversal sequences in the fileNames[] parameter to read arbitrary files from the server filesystem, including application configuration files such as config/parameters.yml that may contain secrets and database credentials. Exploitation evidence was observed by the Shadowserver Foundation on 2026-01-19 (UTC).","epss":{"date":"2026-11-08","percentile":0.55412,"score":0.00756},"exploits":[{"kind":"exploit","source":"CNA: VulnCheck","url":"https://cn-sec.com/archives/2451582.html"},{"kind":"exploit","source":"CNA: VulnCheck","url":"https://blog.csdn.net/qq_41904294/article/details/135007351"},{"kind":"exploit","source":"CNA: VulnCheck","url":"https://github.com/zeroChen00/exp-poc/blob/main/EduSoho%E6%95%99%E5%9F%B9%E7%B3%BB%E7%BB%9Fclassropm-course-statistics%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md"},{"kind":"exploit","source":"CNA: VulnCheck","url":"https://github.com/gobysec/GobyVuls/blob/master/CNVD-2023-03903.md"}],"kev":null,"metrics":[{"score":8.7,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1794146387445,"publishedAt":1769100925228,"references":[{"source":"CNA: VulnCheck","tags":["product"],"url":"https://www.edusoho.com/"},{"source":"CNA: VulnCheck","tags":["release-notes","patch"],"url":"https://github.com/edusoho/edusoho/releases/tag/v22.4.7"},{"source":"CNA: VulnCheck","tags":["technical-description","exploit"],"url":"https://cn-sec.com/archives/2451582.html"},{"source":"CNA: VulnCheck","tags":["technical-description","exploit"],"url":"https://blog.csdn.net/qq_41904294/article/details/135007351"},{"source":"CNA: VulnCheck","tags":["exploit"],"url":"https://github.com/zeroChen00/exp-poc/blob/main/EduSoho%E6%95%99%E5%9F%B9%E7%B3%BB%E7%BB%9Fclassropm-course-statistics%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md"},{"source":"CNA: VulnCheck","tags":["exploit"],"url":"https://github.com/gobysec/GobyVuls/blob/master/CNVD-2023-03903.md"},{"source":"CNA: VulnCheck","tags":["government-resource","vdb-entry"],"url":"https://www.cnvd.org.cn/flaw/show/CNVD-2023-03903"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/edusoho-arbitrary-file-read-via-classroom-course-statistics"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/edusoho/edusoho/releases/tag/v22.4.7"}],"revision":"33be8738aa0b22631ecd9c571a07f4c848a77f3823a1f62d17f6235616855cf6","sources":[{"modifiedAt":1794146387445,"name":"CNA: VulnCheck","retrievedAt":1794146911295,"url":"https://www.cve.org/CVERecord?id=CVE-2023-7335"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794150528831,"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-7335"}],"ssvc":{"assessedAt":1769106659634,"automatable":"yes","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"EduSoho < 22.4.7 Arbitrary File Read via classroom-course-statistics","updatedAt":1794150528831}