| शीर्षक | Dataease SQLbot <= v1.6.0 Server-Side Request Forgery |
|---|
| विवरण | ### Vulnerability Description
[SQLBot](https://github.com/dataease/SQLBot) is an intelligent data query system based on large language models and RAG, meticulously crafted by the DataEase open-source project team. With SQLBot, users can perform conversational data analysis (ChatBI), quickly extracting the necessary data information and visualizations, and supporting further intelligent analysis.
In `backend/apps/db/es_engine.py`, the Elasticsearch query function directly uses user-provided `host` parameter to make HTTP requests without validating the target address, leading to Server-Side Request Forgery (SSRF). Attackers can use this to scan internal networks, access cloud metadata services, and exploit internal services.
### Affected Versions
SQLBot ≤ 1.6.0 |
|---|
| स्रोत | ⚠️ https://www.notion.so/SQLbot-SSRF-in-Elasticsearch-Unvalidated-Requests-2afea92a3c4180bea524f1a253f8d9a0 |
|---|
| उपयोगकर्ता | din4 (UID 50867) |
|---|
| सबमिशन | 11/02/2026 04:44 AM (8 महीनों पहले) |
|---|
| संयम | 02/04/2026 01:02 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 354854 [Dataease SQLbot तक 1.6.0 Elasticsearch es_engine.py get_es_data_by_http address अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|