Summary of Critical Vulnerabilities in Multiple OA Systems (File Upload/Deserialization/RCE)

Vulnerability Overview This webpage summarizes multiple vulnerabilities discovered in various OA systems (such as Weaver, Yonyou, and certain other providers like "Shikong" and "Ling") in July 2022. These vulnerabilities include file upload, deserialization, and SQL injection issues. Affected Scope Weaver e-office10 Frontend GetShell - Severity: Critical - Affected Versions: Weaver e-office10 - Disclosure Date: 2022/07/28 Weaver OA /workrelate/plan/util/uploadOperate.jsp File Upload - Severity: Critical - Affected Versions: Weaver OA - Disclosure Date: 2022/07/28 (Officially patched in June) Weaver E+office V9 Unauthenticated Arbitrary File Upload Vulnerability - Severity: Critical - Affected Versions: Weaver E+office V9 - Disclosure Date: 2022/07/11 Certain NC Frontend Deserialization Vulnerability - Severity: Critical - Affected Versions: Certain NC - Disclosure Date: 2021/04/24 Certain NC Deserialization Vulnerability - Severity: Critical - Affected Versions: Certain NC V7.0 and other versions - Disclosure Date: 2022/07/26 Certain Shikong KSOA Software Frontend File Upload Vulnerability - Severity: Critical - Affected Versions: Certain Shikong KSOA - Disclosure Date: 2022/07/28 Yonyou NC Cloud Frontend File Upload Vulnerability - Severity: Critical - Affected Versions: Yonyou NC Cloud - Disclosure Date: 2022/07/28 Certain OA /defaultroot/officeserverservlet File Upload - Severity: Critical - Affected Versions: Certain OA - Disclosure Date: 2021/03/03 Certain Yonbip Enterprise Application Suite File Upload Vulnerability - Severity: Critical - Affected Versions: Certain Yonbip V8.5, v8.2, and earlier versions - Disclosure Date: 2022/07/27 Certain Yonbip Enterprise Application Suite Frontend Deserialization Vulnerability - Severity: Critical - Affected Versions: Certain Yonbip V8.5, v8.2, and earlier versions - Disclosure Date: 2022/07/27 Certain OA Frontend Arbitrary File Upload - Severity: Critical - Affected Versions: Certain OA v7.6 and other versions - Disclosure Date: 2022/07/26 Certain Ling OA RCE - Severity: Critical - Affected Versions: Certain Ling OA - Disclosure Date: 2022/07/27 Certain U8-OA Enterprise Edition SQL Injection Vulnerability - Vulnerability ID: CNVD-2022-31182 - Affected Versions: Certain U8-OA Enterprise Edition 2.83 Remediation Weaver e-office10 Frontend GetShell - Officially patched in June Weaver OA /workrelate/plan/util/uploadOperate.jsp File Upload - Officially patched in June Weaver E+office V9 Unauthenticated Arbitrary File Upload Vulnerability - Recommended to upgrade to the latest version Certain NC Frontend Deserialization Vulnerability - Recommended to upgrade to the latest version Certain NC Deserialization Vulnerability - Recommended to upgrade to the latest version Certain Shikong KSOA Software Frontend File Upload Vulnerability - Recommended to upgrade to the latest version Yonyou NC Cloud Frontend File Upload Vulnerability - Recommended to upgrade to the latest version Certain OA /defaultroot/officeserverservlet File Upload - Recommended to upgrade to the latest version Certain Yonbip Enterprise Application Suite File Upload Vulnerability - Recommended to upgrade to the latest version Certain Yonbip Enterprise Application Suite Frontend Deserialization Vulnerability - Recommended to upgrade to the latest version Certain OA Frontend Arbitrary File Upload - Recommended to upgrade to the latest version Certain Ling OA RCE - Recommended to upgrade to the latest version Certain U8-OA Enterprise Edition SQL Injection Vulnerability - Recommended to upgrade to the latest version POC Code or Exploit Code No specific POC code or exploit code is provided on the page.

Goal Reached Thanks to every supporter — we hit 100%!

Summary of Critical Vulnerabilities in Multiple OA Systems (File Upload/Deserialization/RCE)