The Tsinghua Unigroup Electronic Archives System contains an unrestricted file upload vulnerability that permits remote, unauthenticated attackers to potentially execute malicious code.

This is an unrestricted file upload vulnerability (CWE-434) occurring within the /Archive/ErecordManage/uploadFile.html file. The flaw allows an unauthenticated remote attacker to manipulate the File argument to upload arbitrary files to the server.

The ability to upload arbitrary files to a server environment poses a significant risk of remote code execution, which can lead to complete system compromise, data theft, or unauthorized modification of archived records. Given the CVSS score of 7.3, this vulnerability is classified as High severity, indicating a substantial risk to the confidentiality, integrity, and availability of the affected system.

Immediate Action: As the vendor has not provided a patch, administrators should immediately restrict access to the /Archive/ErecordManage/uploadFile.html endpoint at the network or application firewall level.

Proactive Monitoring: Monitor web server access logs for suspicious POST requests to the uploadFile.html endpoint and audit the directory where uploads are stored for unrecognized file extensions.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block file upload requests that do not match strictly defined file type, size, and content signatures.

Public Exploit Available: Yes, a public proof-of-concept exists as documented in the referenced GitHub repository.

Due to the lack of a vendor-supplied patch and the availability of a public proof-of-concept, this vulnerability presents an immediate operational risk. Organizations utilizing the Tsinghua Unigroup Electronic Archives System must prioritize blocking access to the vulnerable endpoint and implementing strict egress filtering to prevent the potential use of uploaded malicious files.