CVE-2026-6143 cc-switch跨域策略配置错误漏洞

import requests # Target URL (Replace with actual vulnerable endpoint) target_url = "http://localhost:8080/api/proxy" # Malicious Origin header malicious_origin = "http://evil.com" headers = { "Origin": malicious_origin, "User-Agent": "PoC-Scanner/1.0" } try: # Send a pre-flight OPTIONS request or a simple GET request response = requests.options(target_url, headers=headers, timeout=5) print(f"[+] Target: {target_url}") print(f"[+] Sent Origin: {malicious_origin}") print(f"[+] Response Status: {response.status_code}") print("[+] Response Headers:") # Check if the server reflects the malicious origin in CORS headers acao = response.headers.get("Access-Control-Allow-Origin") acac = response.headers.get("Access-Control-Allow-Credentials") if acao: print(f" Access-Control-Allow-Origin: {acao}") if acac: print(f" Access-Control-Allow-Credentials: {acac}") # Vulnerability Condition: Reflects specific origin or allows '*' with credentials if acao == malicious_origin or (acao == "*" and acac == "true"): print("\n[!] VULNERABILITY CONFIRMED: Permissive CORS policy detected.") else: print("\n[-] Vulnerability not detected or strict CORS is enforced.") except requests.exceptions.RequestException as e: print(f"[-] Error connecting to target: {e}")