Description
攻击者通过发送恶意数据包，利用反序列化数据包，达到命令执行的效果，导致系统被攻击与控制。
关于U8cloud所有版本pubsmsservlet接口存在反序列化漏洞的安全公告
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://security.yonyou.com/
https://seclens.info/bulletins/236553
https://cn-sec.com/archives/4620377.html
https://mrxn.net/jswz/yonyou-pubsmsservlet-xstream-rce.html
https://zhuanlan.zhihu.com/p/1962126420613529714
https://it.shanghaitech.edu.cn/xxaq/list.htm
https://www.ddpoc.com/DVB-2024-6057.html
https://comate.baidu.com/zh/page/s0y5eivjdua