{"id":81398,"date":"2026-07-02T20:34:20","date_gmt":"2026-07-02T17:04:20","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2022-50973-yonyou-ksoa-9-0-unauthenticated-file-upload-rce-via-imageupload-servlet\/"},"modified":"2026-07-02T20:34:20","modified_gmt":"2026-07-02T17:04:20","slug":"cve-2022-50973-yonyou-ksoa-9-0-unauthenticated-file-upload-rce-via-imageupload-servlet","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2022-50973-yonyou-ksoa-9-0-unauthenticated-file-upload-rce-via-imageupload-servlet\/","title":{"rendered":"CVE-2022-50973 &#8211; Yonyou KSOA 9.0 Unauthenticated File Upload RCE via ImageUpload Servlet"},"content":{"rendered":"<p>CVE ID :CVE-2022-50973<\/p>\n<p>  Published : July 2, 2026, 5:04 p.m. | 42\u00a0minutes ago<\/p>\n<p>  Description :Yonyou KSOA 9.0 contains an unauthenticated arbitrary file upload vulnerability in the com.sksoft.bill.ImageUpload servlet that allows unauthenticated attackers to upload arbitrary files by submitting a POST request with attacker-controlled filepath and filename parameters without any authentication, file type, extension, or content validation. Attackers can upload a JSP webshell by specifying a malicious filename and root filepath, with the uploaded file stored under the pictures directory and directly executed by the web server, resulting in unauthenticated remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-11-07 (UTC).<\/p>\n<p>  Severity: 9.8 | CRITICAL<\/p>\n<p>  Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID :CVE-2022-50973 Published : July 2, 2026, 5:04 p.m. | 42\u00a0minutes ago Description :Yonyou KSOA 9.0 contains an unauthenticated arbitrary file upload vulnerability in the com.sksoft.bill.ImageUpload servlet that allows unauthenticated attackers to upload arbitrary files by submitting a POST request with attacker-controlled filepath and filename parameters without any authentication, file type, extension, or content &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-81398","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/81398","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=81398"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/81398\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=81398"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=81398"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=81398"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}