admin/GobyVuls
1
0
Fork 0
mirror of https://github.com/gobysec/GobyVuls.git synced 2025-06-20 09:50:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

[add] Seeyon_OA_Fastjson_loginController_do_RCE

Browse Source
This commit is contained in:
gaopeng2 2021-07-07 16:47:49 +08:00
parent 0fe2d1b829
commit 971289f1e9
2 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
Seeyon/Seeyon_OA_Fastjson_loginController_do_RCE/README.md Normal file
View File

@ -0,0 +1,25 @@
# Seeyon OA Fastjson loginController.do RCE
The old version of Seeyon OA software (below V8.0, V8.0 was released on June 11, 2020) integrated Fastjson component has a deserialization vulnerability
**Affected Version**:
```json
Seeyon OA V7.1、V7.1SP1
Seeyon OA V7.0、V7.0SP1、V7.0SP2、V7.0SP3
Seeyon OA V6.1、V6.1SP1、V6.1SP2
Seeyon V6.0、V6.0SP1
Seeyon V5.6、V5.6SP1
```
**FOFA query rule**: [app="致远互联-OA"](https://fofa.so/result?qbase64=YXBwPSLoh7Tov5zkupLogZQtT0Ei)
# Demo
![](Seeyon_OA_Fastjson_loginController_do_RCE.gif)

BIN
Seeyon/Seeyon_OA_Fastjson_loginController_do_RCE/Seeyon_OA_Fastjson_loginController_do_RCE.gif Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 1.0 MiB