| शीर्षक | jeecgboot JeecgBoot <= v3.9.1 SSRF |
|---|
| विवरण | A second-order Server-Side Request Forgery (SSRF) vulnerability exists in the OpenApi service of jeecgboot_JeecgBoot. The /openapi/add endpoint lacks proper authorization (missing @RequiresPermissions) and input validation, allowing any authenticated user to inject malicious URLs into the originUrl database field. When the /openapi/call/{path} endpoint is subsequently invoked, the application retrieves the unvalidated URL and makes an outbound HTTP request using restTemplate.exchange(). This allows attackers to bypass network segmentation, scan internal network services, and exfiltrate sensitive cloud metadata or local credentials. |
|---|
| स्रोत | ⚠️ https://github.com/jeecgboot/JeecgBoot/issues/9554 |
|---|
| उपयोगकर्ता | Ana10gy (UID 93358) |
|---|
| सबमिशन | 15/04/2026 05:16 PM (2 महीनों पहले) |
|---|
| संयम | 01/05/2026 01:58 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 360561 [JeecgBoot तक 3.9.1 OpenApi Service OpenApiController.java OpenApiController.add/OpenApiController.call originUrl database अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|