Description
U8cloud系统NCPortalServlet接口存在实体注入漏洞
用友U8 Cloud NCPortalServlet XML实体注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnvd.org.cn/flaw/show/CNVD-2025-00733
https://blog.csdn.net/qq_36618918/article/details/135402449
https://cn-sec.com/archives/2416894.html
https://mrxn.net/tag/%E7%94%A8%E5%8F%8B
http://www.yxfzedu.com/article/4675
https://www.cnblogs.com/lovesaber157/p/18186678
https://zgao.top/%E7%94%A8%E5%8F%8B%E5%A4%9A%E4%B8%AA%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0%E5%90%88%E9%9B%86/
http://www.sxxdckj.com/cms/a/yong-you-wang-luo-ke-ji-gu-fen-you-xian-gong-si-U8Cloud-cun-zai-XML-shi-ti-zhu-ru-lou-dong.html
https://www.ddpoc.com/DVB-2024-6989.html
https://zhuanlan.zhihu.com/p/1932214870562047555
https://github.com/Co5mos/nuclei-tps/blob/main/http/vulnerabilities/yonyou/yonyou-u8-cloud-xchangeservlet-xxe.yaml
https://www.gm7.org/archives/32778