Description
攻击者通过发送恶意数据包，利用反序列化数据包，达到命令执行的效果，导致系统被攻击与控制。
关于U8cloud所有版本InvokerServlet接口反序列化等漏洞的安全公告
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.nsfocus.net/u8cloud-servicedispatcher/
https://security.yonyou.com/#/patchInfo?foreignKey=7bd5b43e2c984a618b2b1d3f288110ae
https://rivers.chaitin.cn/blog/cqp1rup0lnec5jjugao0
https://www.secrss.com/articles/59025
https://www.h3c.com/cn/d_202310/1949410_30003_0.htm
https://zhuanlan.zhihu.com/p/657551322
https://github.com/admin772/POC/blob/main/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8Bu8-cloud%E7%B3%BB%E7%BB%9FESBInvokerServlet%E5%AD%98%E5%9C%A8%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E.md
https://www.ddpoc.com/DVB-2023-5683.html