Description
用友 U8 Cloud 存在反序列化漏洞，攻击者可通过LoginVideoServlet接口发送恶意数据包，利用反序列化数据包，达到命令执行的效果，导致系统被攻击与控制
用友 U8 Cloud LoginVideoServlet 反序列化远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://stack.chaitin.com/vuldb/detail/8f2ce9a8-99bf-470f-aba1-d39f2cf6ac4f
http://security.zone.ci/aliyun/ali_highrisk/10777.html
https://download.xray.cool/vul/453vul.pdf
https://blog.csdn.net/weixin_43567873/article/details/138276664
https://zone.ci/e/tags/?tagname=u8cloud
https://cn-sec.com/archives/2337564.html