| タイトル | Jeeboot 3.9.2 Server-Side Request Forgery |
|---|
| 説明 | JeecgBoot AiragChatController SSRF and Information Disclosure Vulnerability
An issue was discovered in JeecgBoot version 3.9.2. The /airag/chat/send endpoint in org.jeecg.modules.airag.app.controller.AiragChatController allows unauthenticated remote attackers to conduct Server-Side Request Forgery (SSRF) and retrieve internal or remote document contents.
The endpoint is decorated with @IgnoreAuth and accepts a files parameter within the request body, which allows passing remote http/https file URLs. The backend handles this parameter by downloading the specified file, parsing its text content using Apache Tika, and appending the parsed text into the Large Language Model (LLM) context.
The vulnerability stems from an incomplete SSRF validation logic in org.jeecg.common.util.filter.SsrfFileTypeFilter. The current implementation only blocks loopback and link-local addresses, failing to restrict private IP address ranges such as 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16.
Consequently, a remote attacker without a valid session or X-Access-Token can force the server to request files from internal HTTP services. If the target file matches an allowed document extension (e.g., txt, pdf, docx, doc, pptx, xlsx, md), its content will be processed and potentially disclosed to the attacker via the model's response.
The issue has been fixed. See the issue for details.
|
|---|
| ソース | ⚠️ https://github.com/jeecgboot/JeecgBoot/issues/9672#issuecomment-4739323732 |
|---|
| ユーザー | s1ldyd (UID 98860) |
|---|
| 送信 | 2026年06月18日 09:52 (2 月 ago) |
|---|
| モデレーション | 2026年08月05日 21:46 (2 months later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 386382 [JeecgBoot 迄 3.9.2 Anonymous Chat Attachment Parser /airag/chat/send 特権昇格] |
|---|
| ポイント | 20 |
|---|