CyberRota Analysis
AI-GeneratedO2OA version 10.0.2 is vulnerable to a local code execution flaw due to its sandbox mechanism in the Invoke script execution feature, allowing attackers to execute arbitrary code on affected systems. Organizations using this version should prioritize remediation to mitigate the risk of unauthorized access and potential system compromise. Immediate attention is recommended for environments where local access to the application is possible.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.