| शीर्षक | elunez eladmin <= v2.7 (2026.04.21) SSRF |
|---|
| विवरण | A Server-Side Request Forgery (SSRF) vulnerability exists in the database connection testing feature of elunez_eladmin. While connecting to remote databases is an intended business function, the application fails to implement proper network boundaries or strictly sanitize the JDBC URL. The application's weak blacklist filter (sanitizeJdbcUrl) attempts to block dangerous properties but can be bypassed. Consequently, an authenticated user with database:testConnect permissions can supply arbitrary internal IPs, restricted loopback addresses, or non-database ports. This abuses the application server as a confused deputy to probe internal network topologies, discover hidden services behind firewalls, and potentially trigger secondary vulnerabilities (like deserialization or arbitrary file read) via malicious JDBC parameters.
|
|---|
| स्रोत | ⚠️ https://github.com/elunez/eladmin/issues/900 |
|---|
| उपयोगकर्ता | Ana10gy (UID 93358) |
|---|
| सबमिशन | 13/05/2026 05:24 PM (5 महीनों पहले) |
|---|
| संयम | 01/06/2026 03:34 PM (19 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 277000 [eladmin तक 2.7 DatabaseController.java अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|