Description
攻击者通过发送恶意数据包，利用反序列化数据包，达到命令执行的效果，导致系统被攻击与控制。
关于U8cloud3.6-5.1sp版本LoginVideoServlet接口反序列化漏洞的安全公告
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ufida168.com/case_detail/4476.html
https://avd.aliyun.com/detail?id=AVD-2023-1686873
https://stack.chaitin.com/vuldb/detail/8f2ce9a8-99bf-470f-aba1-d39f2cf6ac4f
https://security.yonyou.com/#/noticeInfo?id=400
http://security.zone.ci/aliyun/ali_highrisk/10777.html