Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows remote attackers to upload malicious files by sending multipart POST requests with arbitrary filenames and disguised content types. Attackers can upload PHP webshells to the Document directory and execute them via HTTP GET requests to achieve remote code execution as the web server user. Exploitation evidence was first observed by the Shadowserver Foundation on 2022-10-10 (UTC).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2022-50993 Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows r… https://www.cve.org/CVERecord?id=CVE-2022-50993
Post summary
The post announces CVE‑2022‑50993, an unauthenticated arbitrary file upload vulnerability in E‑office prior to version 10.0_20221201, without any PoC, exploit details, or patch information.
🚨*CVE* CVE-2022-50993 Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability in the OfficeServer.php endpoint that allows r… https://www.cve.org/CVERecord?id=CVE-2022-50993 ----- Traducción: CVE-2022-50993 Wea… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2022‑50993, detailing an unauthenticated arbitrary file upload flaw in Fanwei E‑office versions prior to 10.0_20221201.
🚨 CRITICAL — CVE-2022-50993 Weaver (Fanwei) E-office versions prior to 10.0_20221201 contain an unauthenticated arbitrary file upload vulnerability… CVSS 9.8 🔴 No patch yet Full analysis → https://sec.kaitan.id/cves/CVE-2022-50993 #HP #CyberSecurity #InfoSec
Post summary
The post announces a critical unpatched unauthenticated file‑upload vulnerability (CVE‑2022‑50993) with high CVSS, but it does not provide proof‑of‑concept, exploit code, or evidence of active exploitation.