致远OA /seeyon/content/content.do ofd 后台解压漏洞

2023-06-01 致远OA PoC No

Description

致远OA /seeyon/content/content.do 接口调用的 OfdJavaZipUtil.unzip 方法存在 zipslip 解压漏洞，可导致任意文件上传

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities