| tiêu đề | jeecgboot JeecgBoot <= v3.9.2 SSRF |
|---|
| Mô tả | A Server-Side Request Forgery (SSRF) vulnerability exists in the /airag/airagModel/test endpoint of JeecgBoot. An authenticated attacker can provide a malicious baseUrl within the AiragModel request body. The application passes this URL to the langchain4j framework to initiate outbound HTTP requests without performing validation or sanitization. This allows attackers to probe internal network services, perform port scanning, or access sensitive cloud instance metadata (e.g., AWS/GCP metadata endpoints). Furthermore, the endpoint lacks permission annotations, allowing any authenticated user to trigger the flaw, and it persists the malicious configuration to the database, enabling stored SSRF.
|
|---|
| Nguồn | ⚠️ https://github.com/jeecgboot/JeecgBoot/issues/9609 |
|---|
| Người dùng | Ana10gy (UID 93358) |
|---|
| Đệ trình | 08/05/2026 16:18 (cách đây 27 ngày) |
|---|
| Kiểm duyệt | 31/05/2026 11:56 (23 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 367518 [JeecgBoot đến 3.9.2 /airag/airagModel/test baseUrl nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|