Description
致远互联-OA 是一款数字化协同办公软件，致力于为企业提供一站式大数据分析解决方案。致远OA 的 fileUpload.do 接口存在文件上传漏洞，未经身份验证的远程攻击者可以通过目录遍历绕过上传接口限制，并利用 menu.do 接口替换上传文件的 fileid 值，将 webshell 上传到服务器，从而获取服务器权限并控制整个 web 服务器。
致远OA /seeyon/fleUpload.do 文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E8%87%B4%E8%BF%9COA/%E8%87%B4%E8%BF%9C%E4%BA%92%E8%81%94-OA%E5%89%8D%E5%8F%B0fileUpload.do%E5%AD%98%E5%9C%A8%E7%BB%95%E8%BF%87%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://rivers.chaitin.cn/blog/cqv1uvp0lne0chgvdm40
https://www.cnblogs.com/bonelee/p/15160660.html
https://disk.scan.cm/All_wiki/%E4%BD%A9%E5%A5%87PeiQi-WIKI-POC-2021-7-20%E6%BC%8F%E6%B4%9E%E5%BA%93/PeiQi_Wiki/OA%E4%BA%A7%E5%93%81%E6%BC%8F%E6%B4%9E/%E8%87%B4%E8%BF%9COA/%E8%87%B4%E8%BF%9COA%20Session%E6%B3%84%E9%9C%B2%20%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md
https://hackeyes.github.io/2021/04/09/%E8%87%B4%E8%BF%9COA%E5%89%8D%E5%8F%B0getshell/
https://qkl.seebug.org/vuldb/ssvid-89205
https://cn-sec.com/archives/3156918.html
https://blog.csdn.net/qq_63217130/article/details/141185113
https://avd.aliyun.com/detail?id=AVD-2022-1395692
https://zhuanlan.zhihu.com/p/348522619
https://www.secrss.com/articles/28914
https://vulncheck.com/advisories/zhiyuan-oa-system-path-traversal-file-upload