| शीर्षक | jeecgboot JeecgBoot <= v3.9.1 SSRF |
|---|
| विवरण | A second-order Server-Side Request Forgery (SSRF) vulnerability exists in the announcement file download feature of jeecgboot_JeecgBoot. An attacker can inject malicious HTTP URLs into the files field of an announcement via the POST /sys/annountCement/add endpoint, as the application fails to perform URL or IP validation. When a user or administrator subsequently triggers a download of the announcement attachments via the GET /sys/annountCement/downLoadFiles endpoint, the server fetches the injected URLs using HttpURLConnection without SSRF protections. This vulnerability allows attackers to scan internal networks, access local services, and retrieve sensitive data such as cloud metadata.
|
|---|
| स्रोत | ⚠️ https://github.com/jeecgboot/JeecgBoot/issues/9553 |
|---|
| उपयोगकर्ता | Ana10gy (UID 93358) |
|---|
| सबमिशन | 15/04/2026 05:16 PM (2 महीनों पहले) |
|---|
| संयम | 01/05/2026 01:58 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 360560 [JeecgBoot तक 3.9.1 LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch files अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|