Description
蓝凌OA是一款由深圳市蓝凌软件股份有限公司自主研发的全程在线数字化OA系统，广泛应用于大中型企业的在线化办公。该漏洞存在于蓝凌OA的/sys/ui/extend/varkind/custom.jsp接口中，攻击者可以通过发送特制的XML数据，利用反序列化漏洞执行任意命令，可能导致服务器被完全控制。
蓝凌 OA /sys/ui/extend/varkind/custom.jsp XMLDecoder 代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://jiushill.github.io/posts/980cff8b.html
https://github.com/tzwlhack/Vulnerability/blob/main/%E8%93%9D%E5%87%8COA%20custom.jsp%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
https://cloud.tencent.com/developer/article/2304658
https://www.lmboke.com/archives/lan-ling-oalou-dong-li-yong-zong-jie
https://bbs.decoyit.com/thread-588-1-1.html
https://blog.csdn.net/qq_33608000/article/details/136564066
https://www.hackjie.com/docs/3288.html
https://zhuanlan.zhihu.com/p/372388563
https://www.cnblogs.com/cn-gov/p/14961849.html
https://developer.aliyun.com/article/1159812
https://www.modb.pro/db/154138
https://cn-sec.com/archives/2437218.html
https://developer.volcengine.com/articles/7381543614968496138
https://zeroday.hitcon.org/vulnerability/ZD-2022-00469