Description
致远OA存在远程代码执行漏洞，此漏洞是程序对用户输入的以/seeyon/rest/orgMember/开头的URL数据校验不充分导致的。
致远OA Rest接口密码重置漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E8%87%B4%E8%BF%9COA/%E8%87%B4%E8%BF%9COA-ucpcLogin%E5%AF%86%E7%A0%81%E9%87%8D%E7%BD%AE%E6%BC%8F%E6%B4%9E.md
https://www.cnblogs.com/fuchangjiang/p/17699582.html
https://blog.csdn.net/qq_39342001/article/details/137350007
https://netc.shcmusic.edu.cn/2023/0911/c1811a48785/page.htm
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E8%87%B4%E8%BF%9Coa/%E8%87%B4%E8%BF%9COA%20A8%20%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E5%AF%86%E7%A0%81%E4%BF%AE%E6%94%B9%E6%BC%8F%E6%B4%9E/
https://stack.chaitin.com/vuldb/detail/6eec0895-432a-471a-9f70-ceb3cc9bb6ff
https://cn-sec.com/archives/2616530.html
https://zhuanlan.zhihu.com/p/656081347
https://www.ha.edu.cn/upload/202309/13/202309131001280437.pdf