Description
亿赛通 XStream组件中存在不安全的反序列化漏洞。该漏洞是由于多个接口对用户输入验证不足导致的。
亿赛通 XStream 不安全的反序列化漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/0xf4n9x/CDGXStreamDeserRCE
https://0xf4n9x.github.io/cdg-xstream-deserialization-arbitrary-file-upload.html
https://cn-sec.com/archives/3050512.html
https://www.ddpoc.com/DVB-2023-5144.html
https://blog.csdn.net/m0_71744044/article/details/140136111
https://x.threatbook.com/v5/article?threatInfoID=98700
https://cn.t00ls.com/articles-62665.html
https://www.cnblogs.com/Zephyr07/articles/19025027