Description
NC及NC Cloud系统的接口存在fastjson信息泄露漏洞。攻击者可利用该漏洞获取服务器的出网情况。
关于NC及NC Cloud系统的fastjson漏洞的安全通告
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.qianxin.com/news/detail?news_id=4837
https://www.nsfocus.com.cn/html/2020/39_0528/916.html
https://www.anquanke.com/post/id/207029
https://cloud.tencent.com/announce/detail/1112
https://www.huaweicloud.com/notice/2018/20200302161630061.html
https://help.aliyun.com/zh/edas/product-overview/security-updates-fastjson-vulnerability-on-edas-hosts
https://blog.nsfocus.net/fastjson-ns-2/
https://docs.jdcloud.com/cn/web-application-firewall/fastjson-deserializa-loophole
https://isecurity.huawei.com/sec/web/viewAlert.do?id=2415
https://it.ruc.edu.cn/wlaq/8597a730348a473192d93abd4c393768.htm
https://opendocs.alipay.com/rules/03f7dr
https://www.secevery.com/toBugInfo?id=1813153539837566978
https://cn-sec.com/archives/3007226.html
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E7%94%A8%E5%8F%8Bnc/%E7%94%A8%E5%8F%8Bnc%206.5%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%E6%BC%8F%E6%B4%9E/
https://avd.aliyun.com/detail?id=AVD-2022-1399795