用友 U8 Cloud /hrss/dorado XML实体注入漏洞

2024-05-09 用友U8 Cloud PoC No

Description

用友U8cloud所有版本hrss/dorado下存在实体注入漏洞,可读取服务器上任意文件

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities