Description
亿赛通 EmailAuditService XStream组件中存在不安全的反序列化漏洞。该漏洞是由于EmailAuditService接口对用户输入验证不足导致的。
亿赛通 EmailAuditService 不安全的反序列化漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E4%BA%BF%E8%B5%9B%E9%80%9A%E7%94%B5%E5%AD%90%E6%96%87%E6%A1%A3%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F/%E4%BA%BF%E8%B5%9B%E9%80%9A%E7%94%B5%E5%AD%90%E6%96%87%E6%A1%A3%E5%AE%89%E5%85%A8%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9FdocRenewApp%E5%AD%98%E5%9C%A8%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E.md
https://0xf4n9x.github.io/cdg-xstream-deserialization-arbitrary-file-upload.html
https://get-shell.com/3601.html
https://www.ddpoc.com/DVB-2024-5852.html
https://blog.csdn.net/qq_36197704/article/details/119458421
https://caidaome.com/?post=717
https://stack.chaitin.com/vuldb/detail/49323d29-68eb-4fe9-ba5a-b8eb13345de0
https://zhuanlan.zhihu.com/p/651945065
https://www.cnblogs.com/fuchangjiang/p/17718451.html