CVE-2025-13083 Drupal核心Web浏览器缓存敏感信息泄露漏洞

import requests import re # CVE-2025-13083 PoC - Drupal Core Web Browser Cache Information Disclosure # This PoC demonstrates checking if a Drupal site is vulnerable to cache-related information disclosure def check_drupal_cache_headers(url): """ Check if Drupal site properly configures cache headers for sensitive pages """ vulnerable_endpoints = [ '/user/', '/user/1', '/admin/', '/node/add', '/admin/config/people/accounts' ] results = [] for endpoint in vulnerable_endpoints: target_url = url.rstrip('/') + endpoint try: response = requests.get(target_url, timeout=10) # Check for insecure cache headers cache_control = response.headers.get('Cache-Control', '') pragma = response.headers.get('Pragma', '') is_vulnerable = False reasons = [] # If no Cache-Control header or contains 'public', might be vulnerable if not cache_control or 'public' in cache_control.lower(): is_vulnerable = True reasons.append('Missing or insecure Cache-Control header') # If Pragma: no-cache is missing if 'no-cache' not in pragma.lower() and 'no-store' not in cache_control.lower(): is_vulnerable = True reasons.append('Missing Pragma: no-cache or Cache-Control: no-store') results.append({ 'endpoint': endpoint, 'status_code': response.status_code, 'vulnerable': is_vulnerable, 'cache_control': cache_control, 'pragma': pragma, 'reasons': reasons }) except requests.RequestException as e: results.append({ 'endpoint': endpoint, 'error': str(e), 'vulnerable': None }) return results def main(): target = input('Enter Drupal site URL (e.g., https://example.com): ') results = check_drupal_cache_headers(target) print('\n=== CVE-2025-13083 Cache Headers Check Results ===\n') for result in results: print(f"Endpoint: {result['endpoint']}") if 'error' in result: print(f" Error: {result['error']}") else: print(f" Status: {result['status_code']}") print(f" Vulnerable: {result['vulnerable']}") print(f" Cache-Control: {result.get('cache_control', 'N/A')}") print(f" Pragma: {result.get('pragma', 'N/A')}") if result.get('reasons'): print(f" Issues: {', '.join(result['reasons'])}") print() if __name__ == '__main__': main()