Description
Yonyou U8存在远程代码执行漏洞，此漏洞是对用户上传至 ServletCommander 数据的验证不充分所导致的。
用友U8 ServletCommander 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/novysodope/fupo_for_yonyou
https://www.ddpoc.com/DVB-2024-6057.html
https://stack.chaitin.com/vuldb/detail/128aca6c-1f29-42ff-a970-f1670ab3ab08
https://x.threatbook.com/v5/article?threatInfoID=95159
https://www.secrss.com/articles/59025
https://zhuanlan.zhihu.com/p/1962126420613529714
https://blog.csdn.net/qq_39573664/article/details/135216549
https://zgao.top/%E7%94%A8%E5%8F%8B%E5%A4%9A%E4%B8%AA%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E5%90%88%E9%9B%86/
https://comate.baidu.com/zh/page/s0y5eivjdua
https://cloud.tencent.com/developer/article/1843616
https://mrxn.net/tag/%E7%94%A8%E5%8F%8B
https://www.77169.net/html/345051.html
https://cn-sec.com/archives/2276619.html
https://www.aqtd.com/nd.jsp?id=5288