Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet
70Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 9.3epss 0.8%
from disclosure to weapon
Published on NVDApr 30
VulnCheckApr 30
exploitation probability
0.8%top 48% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary filenames and disguised content types. Attackers can upload PHP webshells to the Document directory and execute them via HTTP GET requests to achieve remote code execution as the web server user. Exploitation evidence was first observed by the Shadowserver Foundation on 2022-10-10 (UTC).
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Weaver Network Co., Ltd. · E-officepublic PoCs found — 2
cve_referencebbs.chaitin.cn/topic/37unverifiedcve_referencecn-sec.com/archives/1453025.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.