Vulnerability record · CVE-2024-3227 · published 3 April 2024

CVE-2024-3227: Weaver e-office vulnerability

Weaver · E Office

A vulnerability was found in Panwei eoffice OA up to 9.5. It has been declared as critical. This vulnerability affects unknown code of the file /general/system/interface/theme_set/save_image.php of the component Backend. The manipulation of the argument image_type leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259072.

7.2 CVSS 3.1 High EPSS 0.96% · top 40.1% CWE-24 · CWE-24

7.2CVSS 3.1 base score, v2 5.8

0.96%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

E Office Weaver

References

Link	Tags
https://github.com/garboa/cve_3/blob/main/upload.md	ExploitThird Party Advisory
https://vuldb.com/?ctiid.259072	Permissions RequiredVDB Entry
https://vuldb.com/?id.259072	Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.308750	Third Party AdvisoryVDB Entry
https://github.com/garboa/cve_3/blob/main/upload.md	ExploitThird Party Advisory
https://vuldb.com/?ctiid.259072	Permissions RequiredVDB Entry
https://vuldb.com/?id.259072	Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.308750	Third Party AdvisoryVDB Entry

Track CVE-2024-3227 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-34798Weaver e-office unrestricted file upload vulnerabilityAn arbitrary file upload vulnerability in eoffice before v9.5 allows attackers to execute arbitrary code via uploading a crafted file.EPSS 0.78%25 Jul 2023 9.8CVE-2023-2648Weaver e-office unrestricted file upload vulnerabilityA vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/…EPSS 28%11 May 2023 8.8CVE-2023-2647Weaver e-office command injection vulnerabilityA vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown functionality of the file /webroo…EPSS 7.0%11 May 2023 7.5CVE-2023-2765Weaver e-office vulnerabilityA vulnerability has been found in Weaver OA up to 9.5 and classified as problematic. This vulnerability affects unknown code of the file /E-mobile/Ap…EPSS 2.2%17 May 2023 7.5CVE-2023-2766Weaver OA e-office config file exposure via jx2_config.iniWeaver OA 9.5 exposes the file /building/backmgr/urlpage/mobileurl/configfile/jx2_config.ini, allowing unauthenticated remote retrieval of files or d…EPSS 54%analysed17 May 2023 8.6CVE-2026-20349Cisco ASA and FTD SSL VPN HTTP request handling denial of serviceCisco Secure Firewall ASA and FTD software fail to properly check errors when processing HTTP requests in the Remote Access SSL VPN service. An unaut…KEVEPSS 1.0%analysed11 Aug 2026 8.8CVE-2025-27920Output Messenger directory traversal allows arbitrary file accessOutput Messenger before 2.0.63 mishandles file paths, allowing directory traversal via ../ sequences in parameters. An attacker can read files outsid…KEVEPSS 1.9%analysed5 May 2025

Source: NIST National Vulnerability Database (record CVE-2024-3227), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.