Description
帆软报表和帆软BI channel 接口存在反序列化漏洞，2022-08-12 之前的 FineReport10.0/11.0、FineBI5.1 系列均受影响
帆软报表 /channel 存在反序列化漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/emadshanab/goby-POC3/blob/master/2023HW/2023.8.15/%E5%B8%86%E8%BD%AF%E6%8A%A5%E8%A1%A8channel%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.py
https://zhuanlan.zhihu.com/p/4179583157
https://stack.chaitin.com/vuldb/detail/551b68d5-2e74-4bd2-b779-3eef80ace52d
https://blog.csdn.net/qq_51295677/article/details/131789320
https://help.fanruan.com/finereport/edition-view-64033-0.html
https://avd.aliyun.com/detail?id=AVD-2022-1395693
https://ddpoc.com/DVB-2024-7851.html
https://cn-sec.com/archives/3601932.html
https://buaq.net/go-217270.html
https://y4tacker.github.io/2024/07/28/year/2024/7/%E5%B8%86%E8%BD%AFchannel%E6%8E%A5%E5%8F%A3%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E5%89%8D%E4%B8%96%E4%BB%8A%E7%94%9F%E5%8F%8A%E5%88%A9%E7%94%A8%E9%93%BE%E6%80%BB%E7%BB%93/