HQY

金蝶云星空servicegateway接口存在反序列化漏洞_金蝶云星空反序列化漏洞

hqy 发表于2025-01-17 00:32:36 浏览32 评论0

抢沙发发表评论

6.x版本：低于6.2.1012.4
7.x版本：7.0.352.16 至 7.7.0.202111
8.x版本：8.0.0.202205 至 8.1.0.20221110

0x04 复现环境

FOFA: app=“金蝶云星空-管理中心”

0x05 漏洞复现

nuclei脚本

id: kingdee-bos-servicefacade-servicesstub-servicegateway-getserviceuri-common-rce

info:
name: kingdee-bos-servicefacade-servicesstub-servicegateway-getserviceuri-common-rce
severity: critical
author: qn
description: 金蝶云星空-servicegateway-getserviceuri-common-反序列化
metadata:
max-request: 2
fofa-query: app=“金蝶云星空-管理中心”

打赏