References https://www.secrss.com/articles/61959 https://net.xju.edu.cn/info/1158/1497.htm https://www.secevery.com/toBugInfo?id=1734758631813058562 https://www.ddpoc.com/DVB-2024-6628.html https://cn-sec.com/archives/2427931.html https://www.secrss.com/articles/62091 https://mvip.tophant.com/detail/1737050947844182016 https://github.com/YuSec2021/GeneralPOC/blob/main/%E9%87%91%E8%9D%B6Apusic%E5%BA%94%E7%94%A8%E6%9C%8D%E5%8A%A1%E5%99%A8loadTree%20JNDI%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://www.apusic.com/view-477-113.html https://buaq.net/go-208095.html
Related VulnerabilitiesPoCkingdee-oa-apusic-server-file-traversal: 金蝶OA Apusic应用服务器(中间件) server_file 目录遍历金蝶应用服务器V10.0 IIOP反序列化远程代码执行漏洞金蝶天燕Apusic AdminService 远程代码执行漏洞金蝶Apusic应用服务器 loadTree JNDI注入漏洞金蝶Apusic应用服务器 createDataSource JNDI 注入漏洞金蝶Apusic Web 管理控制台存在弱口令金蝶Apusic 存在任意文件上传漏洞金蝶Apusic createDataSource JNDI注入漏洞金蝶Apusic应用服务器 未授权目录遍历漏洞金蝶Apusic应用服务器 createDataSource JNDI注入漏洞金蝶 Apusic 应用服务 deployApp 文件上传漏洞金蝶 EAS createDataSource 路径 jndiName 参数远程代码执行漏洞