RULE(RULE ID:337163)

Rule General Information
Release Date: 2022-11-21
Rule Name: Weaver e-office officeserver.php Arbitrary File Read Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Weaver provides mobile office, wechat office, collaborative office (OA), process management, information portal, knowledge management, cost control management and other functions, suitable for mobile phones and PCS, is one of the mainstream OA systems. Weaver e-office is a standardized collaborative OA office software. Weaver e-office officeserver.php has any file reading vulnerability. Attackers can use this vulnerability to read any file on the server and obtain sensitive information on the server.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.