Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-50993— Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet

CVSS 9.8 · Critical EPSS 0.28% · P52
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-50993

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet
Source: NVD (National Vulnerability Database)
Vulnerability Description
Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary filenames and disguised content types. Attackers can upload PHP webshells to the Document directory and execute them via HTTP GET requests to achieve remote code execution as the web server user. Exploitation evidence was first observed by the Shadowserver Foundation on 2022-10-10 (UTC).
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
危险类型文件的不加限制上传
Source: NVD (National Vulnerability Database)
Vulnerability Title
Weaver E-office 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Weaver E-office是中国泛微（Weaver）公司的一个办公自动化系统。 Weaver E-office 10.0_20221201之前版本存在代码问题漏洞，该漏洞源于OfficeServer.php端点存在未经身份验证的任意文件上传漏洞，允许远程攻击者通过发送带有任意文件名和伪装内容类型的multipart POST请求上传恶意文件，上传PHP webshell到Document目录并通过HTTP GET请求执行，实现远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
Weaver Network Co., Ltd.E-office 0 ~ 10.0_20221201 -

II. Public POCs for CVE-2022-50993

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-50993

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: E-office
Same vendor: Weaver Network Co., Ltd.
Same weakness: CWE-434

V. Comments for CVE-2022-50993

No comments yet

Leave a comment