Description
由于金蝶EAS存在前台文件上传漏洞，未经过身份验证的恶意攻击者通过发送特殊的HTTP请求来上传文件，成功利用此漏洞可获取目标服务器的控制权限。
金蝶EAS /uploadLogo.action 路径存在任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E9%87%91%E8%9D%B6OA-EAS%E7%B3%BB%E7%BB%9F-uploadLogo.action-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/spmonkey/p/17843406.html
https://blog.csdn.net/qq_40550150/article/details/137101264
https://cn-sec.com/archives/2110692.html
https://www.secevery.com/toBugInfo?id=1859082975188926466
https://peiqi.wgpsec.org/dynamic/