RULE(RULE ID:339075)

Rule General Information
Release Date: 2025-06-10
Rule Name: Weaver E-Cology changeUserInfo.jsp Infomation Leakage Vulnerability - 1
Severity:
CVE ID:
Rule Protection Details
Description: Weaver E-cology is a high-end collaborative office system designed for large enterprises and groups. It provides comprehensive functions such as process management, knowledge management, and project management. It supports multiple organizations, departments, and users, helping enterprises achieve efficient collaboration and digital transformation. There is an information disclosure vulnerability in the changeUserInfo.jsp of Weaver E-cology. Attackers can infer user information through the echo.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.