CVE-2021-48013

Weaver E-cology 8.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files through the fpath parameter of the /weaver/ln.FileDownload endpoint. Attackers can send crafted GET requests with directory traversal sequences in fpath to retrieve sensitive...

EUVD-2021-34896

Weaver E-cology 8.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files through the fpath parameter of the /weaver/ln.FileDownload endpoint. Attackers can send crafted GET requests with directory traversal sequences in fpath to retrieve sensitive...

CVE-2021-48013

Weaver E-cology 8.0 is susceptible to a path traversal vulnerability due to insufficient validation of the fpath parameter in the /weaver/ln.FileDownload endpoint. This flaw allows unauthenticated attackers to perform directory traversal via crafted GET requests to read arbitrary files, such as W...