CVE-2023-54398 | Yonyou U8 Cloud up to 3.6sp FileManageServlet FileManageServlet.java doAction os command injection

September 15, 2026 Yanac

A vulnerability marked as critical has been reported in Yonyou U8 Cloud up to 3.6sp. This affects the function doAction of the file nc/impl/pub/filesystem/FileManageServlet.java of the component FileManageServlet. Performing a manipulation results in os command injection.

This vulnerability was named CVE-2023-54398. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More