Description
帆软报表ReportServer存在未授权访问漏洞，未经身份认证的攻击者可通过该漏洞获取有效的sessionId
帆软报表存在未授权访问漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://stack.chaitin.com/vuldb/detail/b8c081b2-d776-4dc5-8417-13122065a4dc
https://github.com/ax1sX/SecurityList/blob/main/Java_OA/FineReportAudit.md
https://cn-sec.com/archives/1974555.html
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/FineReport/FineReport%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E/
https://blog.csdn.net/weixin_51345872/article/details/126699712/
https://help.fanruan.com/finereport/edition-view-64033-0.html
https://avd.aliyun.com/detail?id=AVD-2022-1418772