CVE-2025-22828 PoC — Apache CloudStack 安全漏洞

Description

Apache CloudStack vulnerability allows unauthorized access to annotations on certain resources.

介绍

# CVE-2025-22828

## 📜 Description
Apache CloudStack 4.16.0 and later versions have a broken access control issue that allows users with knowledge of resource UUIDs to read or add comments (annotations) on resources they are not authorized to access.

## 🔍 Vulnerability Details
- **Type:** Broken Access Control
- **Impact:** Unauthorized access to annotations and potentially sensitive data.
- **Affected Versions:** 4.16.0 and later
- **CWE:** Exposure of Sensitive Information to an Unauthorized Actor (CWE-200)

## 🎬 Demonstration Videos

### Unauthorized Access to Annotations (listAnnotations command)
<a href="https://youtu.be/fVo9CmrZelc" target="_blank">
  <img src="https://img.youtube.com/vi/fVo9CmrZelc/maxresdefault.jpg" width="600" height="350"/>
</a>

### Unauthorized Adding of Annotations (addAnnotations command)
<a href="https://youtu.be/m6hWGJ7g8fQ" target="_blank">
  <img src="https://img.youtube.com/vi/m6hWGJ7g8fQ/maxresdefault.jpg" width="600" height="350"/>
</a>

## 🧑‍💻 Discovery

The **CVE-2025-22828** vulnerability was discovered by **Alex Perrakis** (Stolichnayer).

## 🔗 References
- [CVE-2025-22828 on Apache CloudStack Blog](https://cloudstack.apache.org/blog/unauthorised-access-to-annotations/)
- [CVE-2025-22828 on CVE Program](https://www.cve.org/CVERecord?id=CVE-2025-22828)
- [CVE-2025-22828 on NIST](https://nvd.nist.gov/vuln/detail/CVE-2025-22828)
  

文件快照

备注