Skip to content
OpenAdvisories

Product · Weaver

e-Bridge

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-37278

    Weaver e-Bridge Unauthenticated Arbitrary File Read via saveYZJFile

    Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to the downloadUrl parameter of the saveYZJFile endpoint. Attackers can exploit th…

    Weaver e-Bridge