Yonyou UFIDA NC - Information Exposure

ID: yonyou-nc-info-leak

Severity: medium

Author: SleepingBag945

Tags: yonyou,nc,exposure

Description

After logging in and visiting the address where the information was leaked, you will have permission to upload files. Then just go back to the homepage and view the published content directly.

YAML Source

id: yonyou-nc-info-leak

info:
  name: Yonyou UFIDA NC - Information Exposure
  author: SleepingBag945
  severity: medium
  description: |
    After logging in and visiting the address where the information was leaked, you will have permission to upload files. Then just go back to the homepage and view the published content directly.
  reference:
    - https://mp.weixin.qq.com/s/Lu6Zd9LP3PQsb8uzTIcANQ
    - https://github.com/zhangzhenfeng/AnyScan/blob/master/AnyScanUI/AnyPoc/data/poc/bugscan/exp%EF%BC%8D2311.py
  classification:
    cpe: cpe:2.3:a:yonyou:ufida-nc:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: yonyou
    product: ufida-nc
    fofa-query: app="用友-UFIDA-NC
  tags: yonyou,nc,exposure

http:
  - method: GET
    path:
      - "{{BaseURL}}/service/~iufo/com.ufida.web.action.ActionServlet?TableSelectedID&TreeSelectedID&action=nc.ui.iufo.release.InfoReleaseAction&method=createBBSRelease"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "iufo/web/images/usericon.gif"
          - "/iufo/web/images/tree/tree_plus.gif"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100af2c8dcb38f1f629041d158ea9de342388e8d8d1e85c5a277176ad9e5be59373022100b49b6451745d5141c7d403ffa3cddcafa05197a0fd5dd0c6f7542f40f652ba19:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/vulnerabilities/yonyou/yonyou-nc-info-leak.yaml"

View on Github