Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery

A vulnerability was determined in Dataease SQLbot up to 1.6.0. This issue affects the function get_es_data_by_http of the file backend/apps/db/es_engine.py of the component Elasticsearch Handler. This manipulation of the argument address causes server-side request forgery. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 1.7.0 is capable of addressing this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

服务端请求伪造(SSRF)

Dataease SQLBot 代码问题漏洞

Dataease SQLBot是Dataease开源的一个机器人插件。 Dataease SQLBot 1.6.0及之前版本存在代码问题漏洞，该漏洞源于对文件backend/apps/db/es_engine.py中Elasticsearch Handler组件的get_es_data_by_http函数参数address的错误操作，可能导致服务端请求伪造。

N/A

N/A