CVE-2022-4995
Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp
- State
- Published
- Severity
- 9.3 Critical
- Published
- Aug 7, 2026
- Updated
- Aug 14, 2026
- Reserved
- Aug 7, 2026
Description
Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upload vulnerability that allows a remote, unauthenticated attacker to upload arbitrary files, including JSP webshells, by submitting a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary secId and plandetailid field values. Successful exploitation results in remote code execution under the privileges of the application server process. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-14 (UTC).
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-434 Unrestricted Upload of File with Dangerous Type
Affected Products
| Product | Versions |
|---|---|
E-cology 9.0Weaver Network Co., Ltd. |
|
References
- https://www.weaver.com.cn/cs/securityDownload.html#patch
- https://www.weaver.com.cn/cs/ecology_full_log_en.htmlrelease-notes
- https://cn-sec.com/archives/1208148.htmlthird-party-advisory
- https://ch0x01e.github.io/post/ecology9-wen-jian-shang-chuan-fen-xi/technical-descriptionexploit
- https://github.com/gmh5225/CVE-2022-HW-POC/blob/main/%E6%B3%9B%E5%BE%AEOA%20uploaderOperate.jsp%20%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.mdtechnical-descriptionexploit
- https://www.vulncheck.com/advisories/weaver-e-cology-file-upload-rce-via-uploaderoperate-jspthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.