add: AVE-2021-0009

Author: adysec

vulns/2021/AVE-2021-0009.toml

@@ -0,0 +1,31 @@
+[basic]
+description = "蓝凌OA系统sys/ui/extend/varkind/custom.jsp接口存在任意文件读取与SSRF漏洞，攻击者可利用file://协议读取服务器任意文件，包括/etc/passwd和配置文件中的敏感凭据，导致服务器控制权沦陷。"
+published = "2021-04-15"
+remediation = "厂商已发布安全更新，建议升级蓝凌OA至最新版本；临时防护措施包括限制对custom.jsp的访问权限、部署WAF规则拦截file://协议请求。"
+score = 7.5
+severity = "HIGH"
+sources = [
+    "nuclei",
+    "cnvd",
+    "exploitdb",
+]
+title = "蓝凌OA custom.jsp 任意文件读取与SSRF漏洞"
+updated = "2021-04-15"
+
+[exploit]
+exp_urls = []
+poc_urls = []
+
+[id]
+aliases = [
+    "CNVD-2021-28277",
+    "NUCLEI-HTTP-CNVD-2021-CNVD-2021-28277-YAML",
+]
+ave_id = "AVE-2021-0009"
+
+[meta]
+collected_at = "2026-07-14T19:44:34.472673649+00:00"
+status = "completed"
+
+[references]
+urls = ["https://github.com/CLincat/vulcat/blob/main/payloads/Landray/landray-oa-cnvd-2021-28277-ssrf-fileread.py"]