References https://zhuanlan.zhihu.com/p/2004168087210063567 https://avd.aliyun.com/detail?id=AVD-2023-51928 https://ti.qianxin.com/vulnerability/notice-detail/25 https://www.cnblogs.com/pursue-security/p/17685120.html https://zgao.top/%E7%94%A8%E5%8F%8B%E5%A4%9A%E4%B8%AA%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E5%90%88%E9%9B%86/ https://cn-sec.com/archives/2051829.html https://github.com/novysodope/fupo_for_yonyou https://blog.csdn.net/qq_36618918/article/details/137797293 https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E7%94%A8%E5%8F%8B-NC-Cloud-jsinvoke-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md https://cn-sec.com/archives/2954547.html https://www.cnvd.org.cn/flaw/show/CNVD-2024-26308 https://www.cnvd.org.cn/flaw/show/CNVD-2024-35510
Related VulnerabilitiesPoC用友Bip /bi/api/Portal/LoginWithV8 目录遍历漏洞(CVE-2025-66744)用友BIP LoginWithV8 登录绕过漏洞PoC用友BIP数据应用服务 /bi/api/Portal/LoginWithV8 信息泄露漏洞用友BIP数据应用服务 存在登录绕过漏洞用友BIP uploadServlet 任意文件上传漏洞用友BIP数据应用服务存在SQL注入漏洞的安全补丁用友BIP数据应用服务存在任意文件下载漏洞的安全公告用友BIP /bi/api/Portal/GetUserList 信息泄露漏洞用友BIP /iuap-apcom-workbench/ucf-wh/yonbiplogin 文件读取漏洞