CVE-2026-73432— Vulnerability-Lookup 服务端请求伪造漏洞
一分钟漏洞结论
影响对象
vulnerability-lookup vulnerability-lookup
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Vulnerability-Lookup是Vulnerability-Lookup团队开源的一个漏洞查询与扫描工具。 Vulnerability-Lookup 5.5.1及之前版本存在服务端请求伪造漏洞，该漏洞源于远程实例同步功能对远程实例地址仅验证基本URL语法，未限制网络边界且自动跟随重定向，可能导致具有admin:access权限的已验证管理员配置指向内部、回环、链路本地或云元数据服务的地址，从而探测或访问服务器可达但攻击者不可达的服务。
影响版本矩阵 1
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| vulnerability-lookup | vulnerability-lookup | ≤ 5.5.1 |
affected |
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-73432 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup
来源: CVE Program / CVE List V5
Vulnerability Description
Vulnerability-Lookup contains a server-side request forgery (SSRF) vulnerability in the remote-instance synchronization functionality. Remote instance addresses were validated only for basic URL syntax before being stored, while the synchronization worker later dereferenced these addresses using requests.get() with automatic redirect handling and without enforcing network-boundary restrictions.
An authenticated administrator with the admin:access permission could configure a remote instance whose address points to an internal, loopback, link-local, or cloud metadata HTTP(S) service. When synchronization is performed, the Vulnerability-Lookup server would issue the request from its own network context. An attacker could also use a publicly accessible URL that redirects to an internal destination, because redirects were previously followed without revalidating the destination.
Successful exploitation could allow a privileged attacker to probe or interact with services that are accessible from the Vulnerability-Lookup server but not directly reachable by the attacker, including private network services or cloud instance metadata endpoints. The exact confidentiality, integrity, or availability impact depends on the services reachable from the application server.
The patch introduces a shared outbound URL policy that restricts remote instances to HTTP(S), rejects non-public IP addresses, resolves hostnames at request time, and manually validates each redirect destination before following it. The implementation explicitly blocks private, loopback, link-local, multicast, reserved, and unspecified addresses.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
来源: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
来源: CVE Program / CVE List V5
Vulnerability Title
Vulnerability-Lookup 服务端请求伪造漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Vulnerability-Lookup是Vulnerability-Lookup团队开源的一个漏洞查询与扫描工具。 Vulnerability-Lookup 5.5.1及之前版本存在服务端请求伪造漏洞，该漏洞源于远程实例同步功能对远程实例地址仅验证基本URL语法，未限制网络边界且自动跟随重定向，可能导致具有admin:access权限的已验证管理员配置指向内部、回环、链路本地或云元数据服务的地址，从而探测或访问服务器可达但攻击者不可达的服务。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| vulnerability-lookup | vulnerability-lookup | 0 ~ 5.5.1 | - |
|
二、漏洞 CVE-2026-73432 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-73432 的情报信息
请登录查看更多情报信息。
CVE-2026-73432 补丁与修复 (1)
同批安全公告 · vulnerability-lookup · 2026-08-12 · 共 4 条
| CVE-2026-73431 | 8.8 HIGH | Vulnerability-Lookup 授权问题漏洞 |
| CVE-2026-73374 | 6.1 MEDIUM | Vulnerability-Lookup 跨站脚本漏洞 |
| CVE-2026-73405 | 5.3 MEDIUM | Vulnerability-Lookup 授权问题漏洞 |