| 标题 | Bytedesk <=1.3.9 SSRF |
|---|
| 描述 | The endpoint GET /openrouter/api/v1/models accepts a user-supplied apiUrl parameter and passes it directly to a RestTemplate.exchange() call without validation or allowlist enforcement. An attacker supplies an attacker-controlled URL, causing the server to issue an outbound HTTP request to an arbitrary host. DNS callback logs confirm the SSRF, enabling internal network scanning, cloud metadata access, or credential theft. |
|---|
| 来源 | ⚠️ https://github.com/Bytedesk/bytedesk/issues/20 |
|---|
| 用户 | ZAST.AI (UID 87884) |
|---|
| 提交 | 2026-02-26 07時19分 (1 月前) |
|---|
| 管理 | 2026-03-08 08時20分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 349755 [Bytedesk 直到 1.3.9 SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels apiUrl 权限提升] |
|---|
| 积分 | 19 |
|---|