Weaver e-Bridge Vulnerability Patch History (Shiro, SQLi, File Upload, Log4j)

Weaver e-Bridge Update History 2023-11-16 Vulnerability Overview: Fixed issues where certain files were not updated in the previous version. Affected Scope: All users of Weaver e-Bridge. Remediation: Update files. 2023-11-14 Vulnerability Overview: Fixed Shiro vulnerabilities. Affected Scope: All users of Weaver e-Bridge. Remediation: Update the Shiro component. 2023-08-21 Vulnerability Overview: Fixed security vulnerabilities in e-Bridge. Affected Scope: All users of Weaver e-Bridge. Remediation: Update security patches. 2023-07-24 Vulnerability Overview: Fixed Shiro vulnerabilities. Affected Scope: All users of Weaver e-Bridge. Remediation: Update the Shiro component. 2023-05-04 Vulnerability Overview: - Fixed Shiro vulnerabilities. - Fixed SQL injection vulnerabilities occurring after login. Affected Scope: All users of Weaver e-Bridge. Remediation: Update Shiro components and SQL injection patches. 2023-01-29 Vulnerability Overview: - Fixed arbitrary file upload vulnerabilities after login. - Added support for manually resending failed messages in the e-Bridge push log. - Added support for querying e-Bridge push logs by recipient name. - Fixed several known vulnerabilities. Affected Scope: All users of Weaver e-Bridge. Remediation: Update file upload patches and known vulnerability patches. 2022-10-13 Vulnerability Overview: Fixed Shiro vulnerabilities. Affected Scope: All users of Weaver e-Bridge. Remediation: Update the Shiro component. 2022-08-16 Vulnerability Overview: Fixed issues with address book synchronization failures caused by changes in WeCom key permissions. Affected Scope: All users of Weaver e-Bridge. Remediation: Update synchronization mechanisms. 2022-08-03 Vulnerability Overview: Fixed file upload vulnerabilities. Affected Scope: All users of Weaver e-Bridge. Remediation: Update file upload patches. 2022-07-31 Vulnerability Overview: Fixed Log4j vulnerabilities. Affected Scope: All users of Weaver e-Bridge. Remediation: Update the Log4j component. 2022-06-30 Vulnerability Overview: - Fixed dom4j vulnerabilities. - Fixed Shiro vulnerabilities. Affected Scope: All users of Weaver e-Bridge. Remediation: Update dom4j and Shiro components. 2022-06-10 Vulnerability Overview: - Fixed fastjson vulnerabilities. - Fixed multiple system security vulnerabilities. Affected Scope: All users of Weaver e-Bridge. Remediation: Update fastjson and system security patches. 2021-12-08 Vulnerability Overview: - Added support for Lark address book synchronization. - Added support for Lark attendance synchronization. - Added support for Lark rich text messages. - Added configuration options for managing pages for Huawei WeLink, Lark, and Gov DingTalk. - Added support for "Remember Me" cookies. - Fixed multiple bugs. Affected Scope: All users of Weaver e-Bridge. Remediation: Update related features and bug fixes. 2021-08-24 Vulnerability Overview: - Fixed multiple security vulnerabilities. - Optimized functions and fixed bugs. - Added support for withdrawing WeCom messages within 24 hours. Affected Scope: All users of Weaver e-Bridge. Remediation: Update security patches and optimize functions. 2021-06-08 Vulnerability Overview: - Fixed a bug where address book synchronization forecasts failed. - Fixed a bug where workflow submissions failed in iOS WeCom version 3.1.8. - Fixed a bug where TXT files could not be viewed in iOS WeChat (personal version). - Added Qiyuesuo verification functionality to pay slips. - Fixed multiple security vulnerabilities. Affected Scope: All users of Weaver e-Bridge. Remediation: Update related bug fixes and security patches. 2021-05-18 Vulnerability Overview: - Fixed bugs related to changes in personnel account binding relationships. - Fixed bugs related to address book synchronization. Affected Scope: All users of Weaver e-Bridge. Remediation: Update related bug fixes. 2021-03-16 Vulnerability Overview: - Fixed e-Bridge related security vulnerabilities. - WeCom now supports pushing messages to inter-connected enterprises. - Fixed bugs related to manually sending rich media messages from OA. - Updated the workflow image preview control. - Fixed some e-Bridge performance issues. - Added support for FapiaoYun (Invoice Cloud) JSAPI. - Added English language support to the e-Bridge portal. Affected Scope: All users of Weaver e-Bridge. Remediation: Update related features and performance optimizations. 2020-12-21 Vulnerability Overview: - Fixed e-Bridge related security vulnerabilities. - Added monitoring functionality for the Zhejiang Gov DingTalk page. Affected Scope: All users of Weaver e-Bridge. Remediation: Update security patches and monitoring functions. 2020-12-17 Vulnerability Overview: Upgraded xstream to version 1.4.15. Affected Scope: All users of Weaver e-Bridge. Remediation: Upgrade the xstream component. 2020-11-18 Vulnerability Overview: - Fixed e-Bridge vulnerabilities. - Optimized e-Bridge functions. Affected Scope: All users of Weaver e-Bridge. Remediation: Update vu

Goal Reached Thanks to every supporter — we hit 100%!

Weaver e-Bridge Vulnerability Patch History (Shiro, SQLi, File Upload, Log4j)