Description
泛微 E-Bridge addResume 未授权 文件上传限制不当漏洞
泛微 云桥e-Bridge /wxclient/app/recruit/resume/addResume 存在文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E6%B3%9B%E5%BE%AEOA/%E6%B3%9B%E5%BE%AE%E4%BA%91%E6%A1%A5(e-Bridge)%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3addResume%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/m0_46604997/article/details/141643953
https://cloud.tencent.com/developer/article/2443512
http://www.bmth666.cn/2024/08/17/%E6%B3%9B%E5%BE%AE%E4%BA%91%E6%A1%A5e-Bridge-addResume-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/index.html
https://www.weaver.com.cn/cs/security/edm20240725_kdielfrovkewpiiuyrtewtw.html
https://cn-sec.com/archives/3038470.html