Description
UEditor是由百度web前端研发部开发所见即所得富文本web编辑器，具有轻量，可定制，注重用户体验等特点。Ueditor编辑器 DOTNET版本 存在任意文件上传漏洞
Ueditor编辑器 DOTNET版本 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://bbs.huaweicloud.com/blogs/406031
https://github.com/BaizeSec/bylibrary/blob/main/docs/%E6%BC%8F%E6%B4%9E%E5%BA%93/02-%E7%BC%96%E8%BE%91%E5%99%A8%E6%BC%8F%E6%B4%9E/Ueditor/Ueditor%E7%BC%96%E8%BE%91%E5%99%A8.NET1.4.3.3%E7%89%88%E6%9C%AC%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://zhuanlan.zhihu.com/p/85265552
https://www.secrss.com/articles/4762
https://blog.csdn.net/m0_37638874/article/details/125180511
https://www.anquanke.com/post/id/157485
https://nosec.org/m/share/1758.html
https://x1lys.github.io/2024/07/27/Ueditor-1-4-3-3-NET%E7%89%88%E6%9C%AC%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%E5%88%A9%E7%94%A8/index.html
https://www.cnblogs.com/zkwarrior/p/15357709.html
https://www.chabug.org/web/551.html
https://cn-sec.com/archives/2102258.html
https://developer.aliyun.com/article/839694
https://cloud.tencent.com/developer/article/1371559
http://myblog.ac.cn/archives/cnvd-2017-20077%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90