Path Traversal Vulnerability in Weaver E-cology by WeaveTech
CVE-2021-48013

8.7HIGH

Key Information:

Vendor

Weaver Network Co., Ltd.

Status
E-cology
Vendor
CVE Published:
22 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2021-48013?

Weaver E-cology 8.0 is susceptible to a path traversal vulnerability that enables unauthenticated attackers to retrieve arbitrary files on the server. By exploiting the fpath parameter in the /weaver/ln.FileDownload endpoint with crafted GET requests, attackers can leverage directory traversal sequences to access sensitive information, including critical server files like WEB-INF/web.xml. The first signs of exploitation were reported by the Shadowserver Foundation on October 18, 2023, highlighting the urgent need for remediation.

Affected Version(s)

E-cology 8.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2021-48013 - Proof of Concept

References

https://github.com/PeiQi0/PeiQi-WIKI-Book/blob/main/docs/...
technical-descriptionexploit
https://github.com/projectdiscovery/nuclei-templates/blob...
technical-description
https://www.vulncheck.com/advisories/weaver-e-cology-8.0-...
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

The Shadowserver Foundation
.