用友NC /uapws/index.jsp 路径存在鉴权绕过

2023-05-15 用友NC PoC No

Description

当用友NC uapws后台可以访问时,输入任意密码,修改响应Body即可绕过前端访问限制,进一步获取敏感信息

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

Related Vulnerabilities