RULE(RULE ID:338994)

Rule General Information
Release Date: 2025-06-04
Rule Name: Weaver E-Office config_2.php Unauthorized Access Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Weaver E-Office is a lightweight OA product designed for small and medium-sized enterprises. It features simple deployment, quick launch, and low maintenance costs. It provides ready-to-use functions such as approval, attendance, document management, and project management. There is an unauthorized access vulnerability in Weaver E-Office. Attackers can exploit this vulnerability to read the contents of sensitive files.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.