Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2023-54398

Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet

CVSS 4.0 9.3 CRITICALCVSS 3.1 9.8 CRITICALCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2023-54398

Published

Yonyou U8 Cloud contains an unauthenticated Java deserialization vulnerability in the nc.impl.pub.filesystem.FileManageServlet component that allows remote unauthenticated attackers to execute arbitrary OS commands by sending a serialized payload via POST request. Attackers can exploit the doAction method, which passes raw HTTP request body data directly to ObjectInputStream.readObject() without filtering, to achieve remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-02-13.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2023-54398

Published

U8 Cloud

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "vendor": "Yonyou",
                    "product": "U8 Cloud",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "1.0",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "2.0",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "2.1",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "2.3",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "2.5",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "2.6",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "2.65",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "2.7",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.0",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.1",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.2",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.5",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.6",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "3.6sp",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON