Description
攻击者通过发送恶意数据包，利用反序列化数据包，达到命令执行的效果，导致系统被攻击与控制。
关于U8cloud所有版本存在反序列化漏洞的安全公告
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.h3c.com/cn/d_202310/1949410_30003_0.htm
https://www.secrss.com/articles/59025
https://blog.nsfocus.net/u8cloud-servicedispatcher/
https://rivers.chaitin.cn/blog/cq70jnqp1rhtmlvvdp8g
https://security.yonyou.com/#/patchInfo?foreignKey=7bd5b43e2c984a618b2b1d3f288110ae
https://stack.chaitin.com/techblog/detail/155
https://zhuanlan.zhihu.com/p/657551322
https://avd.aliyun.com/detail?id=AVD-2023-1686894