Description
云时空ERP存在信息泄露漏洞，该漏洞是由于online接口对用户的权限校验不当导致的。
云时空ERP online 信息泄露漏洞 (访问成功)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/adysec/POC/blob/main/wpoc/%E4%BA%91%E6%97%B6%E7%A9%BA/%E4%BA%91%E6%97%B6%E7%A9%BA%E7%A4%BE%E4%BC%9A%E5%8C%96%E5%95%86%E4%B8%9AERP%E7%B3%BB%E7%BB%9Fonline%E5%AD%98%E5%9C%A8%E8%BA%AB%E4%BB%BD%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E.md
https://www.ddpoc.com/DVB-2024-7815.html
https://blog.csdn.net/weixin_43167326/article/details/136938039
https://k0u1g.cn/VulnLib/%E6%BC%8F%E6%B4%9E%E5%BA%932024.html
https://www.saury.net/2394.html
https://cn-sec.com/archives/2363409.html
https://zhuanlan.zhihu.com/p/1932214870562047555