CVE-2026-35192 Django 会话劫持漏洞

import requests # Conceptual PoC for CVE-2026-35192 # This script demonstrates checking for the presence of the 'Vary' header in a response. TARGET_URL = "http://target-django-app.com/public-page" def check_cache_vary_header(): session = requests.Session() # Simulate a user with a session cookie session.cookies.set('sessionid', 'attacker_controlled_or_stolen_value') response = session.get(TARGET_URL) print(f"Status Code: {response.status_code}") print(f"Response Headers: {response.headers}") # Check if 'Vary' header includes 'Cookie' vary_header = response.headers.get('Vary', '') if 'Cookie' not in vary_header: print("[!] Potential Vulnerability: 'Vary: Cookie' is missing from response headers.") print(" This might allow the cache to serve the same response to different users.") else: print("[+] 'Vary: Cookie' is present.") if __name__ == "__main__": check_cache_vary_header()