A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-229270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Weaver |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-34223 | A vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/App/System/File/downfile.php. The manipulation of the argument url leads to absolute path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-229270 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 25 Apr 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Weaver e-office
|
|
| CPEs | cpe:2.3:a:weaver:e-office:9.5:*:*:*:*:*:*:* | |
| Vendors & Products |
Weaver weaver Office Automation
|
Weaver e-office
|
MITRE
Status: PUBLISHED
Assigner: VulDB
Published:
Updated: 2024-08-02T06:33:05.773Z
Reserved: 2023-05-17T16:05:00.734Z
Link: CVE-2023-2765
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-05-17T17:15:17.363
Modified: 2025-04-25T16:59:59.533
Link: CVE-2023-2765
Redhat
No data.
OpenCVE Enrichment
No data.