Description
金蝶Apusic应用服务器的管控台存在访问路径权限控制失效、对参数校验不严格的问题。攻击者可以构建绕过权限控制的请求，恶意访问和操作管控台，导致安全风险，配合其他安全缺陷即可导致远程代码执行
金蝶Apusic deployApp 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/qq_36618918/article/details/135111648
https://nic.sdufe.edu.cn/info/1004/1795.htm
https://avd.aliyun.com/detail?id=AVD-2023-1702224
https://rivers.chaitin.cn/vuldb/0d84fcf9-9361-448e-bfc9-d437bea39146
https://security.zone.ci/vulns/msec/307853.html
https://cn-sec.com/archives/2253839.html
https://www.apusic.com/view-477-107.html
https://www.lsgx.com.cn/info/wlaq/9895.html
https://www.secrss.com/articles/61959?app=1
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E9%87%91%E8%9D%B6/%E9%87%91%E8%9D%B6Apusic%E5%BA%94%E7%94%A8%E6%9C%8D%E5%8A%A1%E5%99%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md