Description
佳会视频会议存在任意文件读取漏洞。此漏洞是由于attachment接口对于用户发送的请求缺乏校验导致的。
佳会视频会议 attachment 任意文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/adysec/POC/blob/main/wpoc/%E4%BD%B3%E4%BC%9A%E8%A7%86%E9%A2%91%E4%BC%9A%E8%AE%AE/%E4%BD%B3%E4%BC%9A%E8%A7%86%E9%A2%91%E4%BC%9A%E8%AE%AEattachment%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.md
https://blog.csdn.net/weixin_45790890/article/details/142219173
https://cn-sec.com/archives/2763010.html