CVE-2026-22732 Spring Security HTTP响应头写入缺失漏洞

import requests # PoC to check for missing security headers in Spring Security # Target URL should be an endpoint protected by Spring Security target_url = "http://vulnerable-app.example.com/login" try: response = requests.get(target_url) headers = response.headers # List of headers that might be missing due to CVE-2026-22732 critical_headers = [ "Content-Security-Policy", "X-Frame-Options", "Strict-Transport-Security" ] print(f"[+] Checking headers for {target_url}") vulnerability_found = False for header in critical_headers: if header not in headers: print(f"[!] MISSING CRITICAL HEADER: {header}") vulnerability_found = True if vulnerability_found: print("[+] Potential CVE-2026-22732 vulnerability detected.") else: print("[-] Critical headers present. Target may not be vulnerable.") except Exception as e: print(f"Error: {e}")