致远OA loginController.do fastjson反序列化前台任意文件写入

2021-10-08 致远OA PoC No

Description

致远OA loginController.do 存在fastjson反序列化，攻击者可在前台根据网站的绝对路径写入任意文件

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities