CVE-2023-2648mediumobserved exploitationCWE-434

CVE-2023-2648: medium-severity vulnerability in Weaver E-Office

Weaver E-Office uploadify.php unrestricted upload

Published · Updated

Follow this CVE+ Monitor E-Office

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

75Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actcvss 6.3epss 28%
from disclosure to weapon167 days
Published on NVDMay 11
1st PoC+167d
VulnCheck+301d
A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-228777 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
Weaver · E-Office
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Weaver E-Office

In the same product, most dangerous first.

CVE-2023-2523HIGHWeaver E-Office unrestricted uploadEPSS 32.9%CVE-2023-2647MEDIUMWeaver E-Office File Upload utility_all.php command injectionEPSS 7.0%