RULE(RULE ID:338132)

Rule General Information
Release Date: 2024-06-18
Rule Name: Weaver E-Office10 atuh-file Arbitrary File Upload Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Weaver e-office10 OA system is a professional collaborative OA software for small and medium-sized organizations. There is an arbitrary file upload vulnerability in Weaver e-office10, which allows attackers to upload specially crafted malicious code files to further lead to remote code execution.
Impact: Attackers can upload viruses, Trojans, WebShell, other malicious scripts or pictures containing scripts to the server, and attackers can use these files for subsequent attacks.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.