| 标题 | yonyon U8 Cloud V2.0/V2.1/V2.3/V2.5/V2.6/V2.7/V2.65/V3.0/V3.1/V3.2/V3.5/V3.6/V3.6sp/V5.0/V5.0sp/V5.1/V5.1sp File upload |
|---|
| 描述 | In the "/service/NCloudGatewayServlet" interface, it is possible to bypass software security checks and upload files of any format by constructing specific Ts and Sign request headers. |
|---|
| 来源 | ⚠️ https://github.com/IceSc0rpion/CVE/issues/1 |
|---|
| 用户 | IceSc0rpion (UID 91607) |
|---|
| 提交 | 2025-10-14 06時11分 (12 月前) |
|---|
| 管理 | 2025-10-27 14時58分 (13 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 330129 [Yonyou U8 Cloud 直到 5.1sp Request Header NCloudGatewayServlet ts/sign 权限提升] |
|---|
| 积分 | 15 |
|---|