漏洞描述
SSRF漏洞，即服务器端请求伪造漏洞，是由于服务器端应用程序在处理客户端请求时，未正确验证和过滤URL参数，导致攻击者可以通过构造特定的URL参数，使服务器发起到内部网络或本地的请求。这种漏洞允许攻击者获取内部服务的敏感信息，执行内部网络扫描，甚至可能触发内部服务的漏洞，造成严重的安全威胁。
UnifyEditor Interface 服务端请求伪造漏洞
PoC代码
暂无相关漏洞推荐
- 新中大ERP企业管理软件 /filesrv/NGInterface/Index SQL 注入漏洞
- POC CVE-2020-12447: Onkyo TX-NR585 Web Interface - Directory Traversal
- POC CVE-2020-2036: Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting
- POC CVE-2022-48197: Yahoo User Interface library (YUI2) TreeView v2.8.2 - Cross-Site Scripting
- POC CVE-2024-0012: PAN-OS Management Web Interface - Authentication Bypass
- POC CVE-2024-52762: Ganglia Web Interface (v3.7.3 - v3.7.6) - Cross-Site Scripting
- POC CVE-2024-52763: Ganglia Web Interface (v3.7.3 - v3.7.5) - Cross-Site Scripting
- POC CVE-2024-9474: PAN-OS Management Web Interface - Command Injection
- POC CVE-2025-0108: PAN-OS Management Interface - Path Confusion to Authentication Bypass
- POC azure-nic-ip-forwarding-check: Review Network Interfaces with IP Forwarding Enabled
- POC file-mongodb-http-interface-enabled: MongoDB HTTP Interface Enabled
- POC CVE-2024-37728: OfficeWeb365 Indexs Interface - Arbitrary File Read
- POC empirec2-default-login: Empire C2 / Starkiller Interface - Default Login