Description
<span style="color: rgb(0, 0, 0);">NC、NC Cloud及YonBIP高级版系统可利用ActionInvokeService漏洞实现任意文件上传。</span><br>
关于NC、NC Cloud及YonBIP高级版系统的ActionInvokeService任意文件上传漏洞的安全通告
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.ufida168.com/case_detail/6710.html
https://zhuanlan.zhihu.com/p/2004168087210063567
https://zone.ci/secarticles/wx/496427.html
https://www.gm7.org/archives/41044
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/oa/%E7%94%A8%E5%8F%8B-NC-Cloud-jsinvoke-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E.md