CVE-2022-50993— Weaver E-office 代码问题漏洞

Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet

Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary filenames and disguised content types. Attackers can upload PHP webshells to the Document directory and execute them via HTTP GET requests to achieve remote code execution as the web server user. Exploitation evidence was first observed by the Shadowserver Foundation on 2022-10-10 (UTC).

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

危险类型文件的不加限制上传

Weaver E-office 代码问题漏洞

Weaver E-office是中国泛微（Weaver）公司的一个办公自动化系统。 Weaver E-office 10.0_20221201之前版本存在代码问题漏洞，该漏洞源于OfficeServer.php端点存在未经身份验证的任意文件上传漏洞，允许远程攻击者通过发送带有任意文件名和伪装内容类型的multipart POST请求上传恶意文件，上传PHP webshell到Document目录并通过HTTP GET请求执行，实现远程代码执行。

N/A

N/A