Description
Smartbi存在远程代码执行漏洞，该漏洞是由于RMISrevlet接口对用户的请求验证不当导致的。
Smartbi RMISrevlet ScheduleSDK 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cn-sec.com/archives/4381553.html
https://www.vulncheck.com/advisories/smartbi-rmiservlet-unrestricted-file-upload-rce
https://www.freebuf.com/articles/web/445329.html
https://www.oschina.net/news/255028
https://zone.huoxian.cn/d/2817-smartbi
https://www.venustech.com.cn/new_type/aqtg/20230824/26133.html
https://www.secrss.com/articles/82146
https://sechub.in/view/3105741
http://mp.weixin.qq.com/s/tBkU0GoH4F1eK9JvP3u04w
https://zone.ci/e/tags/?tagname=smartbi
https://www.smartbi.com.cn/patchinfo
https://github.com/advisories/GHSA-75gf-3x5v-8fcm
https://dev.to/sharon_42e16b8da44dabde6d/smartbi-rce-vulnerability-patch-fast-before-hackers-do-oj5