Description
用友GRP-U8存在XXE漏洞，该漏洞源于应用程序解析XML输入时没有进制外部实体的加载，导致可加载恶意外部文件
用友 GRP-U8 /Proxy XXE注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://stack.chaitin.com/vuldb/detail/a46530aa-9215-4734-862c-9782e26357ae
https://developer.aliyun.com/article/1338240
https://www.cnblogs.com/pursue-security/p/17684995.html
https://blog.csdn.net/qq_36618918/article/details/135462664
https://zhuanlan.zhihu.com/p/379317139
https://juejin.cn/post/6960675250551914510
https://peiqi.wgpsec.org/wiki/oa/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8B%20GRP-U8%20Proxy%20SQL%E6%B3%A8%E5%85%A5%20CNNVD-201610-923.html
https://baizesec.github.io/bylibrary/%E6%BC%8F%E6%B4%9E%E5%BA%93/01-CMS%E6%BC%8F%E6%B4%9E/%E7%94%A8%E5%8F%8B/%E7%94%A8%E5%8F%8B%20GRP-u8%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E/
https://cloud.tencent.com/developer/article/1843616
https://github.com/admin772/POC/blob/main/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BGRP-U8-Proxy%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://s4e.io/tools/yonyou-ufida-grp-u8-xxe