漏洞描述
U9C使用的kkfileview4.1.0/kkfileview4.2.0存在历史安全漏洞问题，现已支持最新版本为4.3.0。
关于U9 cloud使用kkfileview存在安全问题的公告
PoC代码
暂无相关漏洞推荐
- 用友 u8-cloud VouchFormulaCopyAction sql注入
- huijietong-cloud-fileread: Huijietong Cloud File Read
- mapgis-cloud-manager-local-file-read: MapGis Cloud Manager Local File Read
- western-digital-mycloud-multi-uploadify-file-upload: Western Digital MyCloud Multi Uploadify File Upload
- 用友 U8 Cloud /u8cloud/api/hrta/returnleave/callback SQL 注入漏洞
- 关于U9 cloudERP软件接口Print/PDFDirectPrint.aspx存在命令执行漏洞的安全通告
- POC ack-cluster-cloud-monitor-disable: Cloud Monitor for ACK Clusters - Disable
- POC cloudfront-compress-object: CloudFront Compress Objects Automatically
- POC cloudfront-custom-certificates: Cloudfront Custom SSL/TLS Certificates - In Use
- POC cloudfront-insecure-protocol: CloudFront Insecure Origin SSL Protocols
- POC cloudfront-integrated-waf: CloudFront Integrated With WAF
- POC cloudfront-logging-disabled: Cloudfront Logging Disabled
- POC cloudfront-security-policy: CloudFront Security Policy