CVE-2026-34443 FreeScout IP校验绕过漏洞

<?php // Vulnerable Logic Simulation in FreeScout < 1.8.211 function checkIpByMaskVulnerable($ip, $range) { // The bug: checks if the IP string contains '/' if (strpos($ip, '/') === false) { // Plain IPs (e.g., "10.0.0.1") do not have '/', so it returns false immediately return false; } // Actual CIDR logic would be here but is unreachable return true; } // Example Usage $target_ip = "10.0.0.1"; // Should be blocked/checked against 10.0.0.0/8 $restricted_range = "10.0.0.0/8"; $result = checkIpByMaskVulnerable($target_ip, $restricted_range); // Output: bool(false) - The check fails, bypassing the restriction echo "Result of IP check: " . var_export($result, true); ?>