Unverified50% confidenceFactExact time
SSRF利用中常被检测的危险协议包括file://（读取本地文件）、dict://（探测端口开放状态）、ftp://（有时可绕过过滤）
1
Sources
50%
Confidence
Long-term
Relevance
10/9/2026
First Seen
Sources
Related Entities
Related Claims
Unverified防御SSRF需对用户可控的URL做协议白名单、禁止访问内网地址、过滤file://等危险协议71% similarUnverifiedSSRF is a class of web security vulnerability in which an attacker manipulates a server-side application into making HTTP requests to unintended internal or external addresses.70% similarUnverified在演示中，豆包按照提示词执行后不仅确认了URL预览功能存在SSRF漏洞，还验证出任意文件读取问题67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/991170API
curl https://kongchang.com/api/v1/knowledge/claims/991170MCP
get_claim(id=991170)