CVE-2025-52659 HCL AION Version 2 Cacheable HTTP Response信息泄露漏洞

import requests import sys # CVE-2025-52659 PoC - HCL AION Version 2 Cacheable HTTP Response # This PoC demonstrates the vulnerability by checking for missing cache control headers def check_cachable_response(target_url): """ Check if the target URL returns cacheable HTTP responses """ print(f"[*] Testing target: {target_url}") try: # Send request without browser-like headers response = requests.get(target_url, timeout=10) print(f"\n[+] Status Code: {response.status_code}") print(f"[+] Content-Length: {len(response.content)}") # Check for cache-related headers cache_headers = { 'Cache-Control': response.headers.get('Cache-Control', 'NOT SET'), 'Pragma': response.headers.get('Pragma', 'NOT SET'), 'Expires': response.headers.get('Expires', 'NOT SET'), 'ETag': response.headers.get('ETag', 'NOT SET'), 'Last-Modified': response.headers.get('Last-Modified', 'NOT SET') } print("\n[*] Cache Control Headers:") for header, value in cache_headers.items(): print(f" {header}: {value}") # Vulnerability check logic vulnerable = False if cache_headers['Cache-Control'] == 'NOT SET' or 'no-store' not in cache_headers['Cache-Control'].lower(): print("\n[!] WARNING: Cache-Control header is missing or does not contain 'no-store'") vulnerable = True if cache_headers['Pragma'] == 'NOT SET' or 'no-cache' not in cache_headers['Pragma'].lower(): print("[!] WARNING: Pragma header is missing or does not contain 'no-cache'") vulnerable = True if vulnerable: print("\n[!] VULNERABLE: HTTP responses may be cached by browser or proxy") print("[!] This could lead to information disclosure of sensitive data") else: print("\n[+] NOT VULNERABLE: Proper cache control headers are set") return vulnerable except requests.RequestException as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] else: target = input("Enter target URL: ").strip() check_cachable_response(target)