用友 U9Cloud FinancialIndexWebService 未授权反序列化漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11_v2
• https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.10
• https://github.com/novysodope/fupo_for_yonyou
• https://github.com/zan8in/wy876-POC
• https://bbs.decoyit.com/thread-587-1-1.html
• https://feedly.com/cve/vendors/yonyou

Related Vulnerabilities

• 关于用友U9Cloud存在文件包含漏洞的公告
• 用友U9cloud /CS/Office/AutoUpdates/back/PatchFile.asmx 文件写入