Update modules/exploits/linux/http/craftcms_preauth_rce_cve_2025_32432.rb

Chocapikk · dledda-r7 · web-flow · commit 691cead95c04 · 2025-04-30T16:10:32.000+02:00
Co-authored-by: Diego Ledda &lt;diego_ledda@rapid7.com&gt;
diff --git a/modules/exploits/linux/http/craftcms_preauth_rce_cve_2025_32432.rb b/modules/exploits/linux/http/craftcms_preauth_rce_cve_2025_32432.rb
@@ -150,7 +150,7 @@ def extract_csrf_token(res)
       'uri' => normalize_uri(target_uri.path, 'index.php'),
       'keep_cookies' => true
     )
-    res2.get_html_document.at('//input[@name="CRAFT_CSRF_TOKEN"]/@value')&.text
+    res2&.get_html_document.at('//input[@name="CRAFT_CSRF_TOKEN"]/@value')&.text
   end
 
   def leak_session_path(csrf)

Original file line number	Diff line number	Diff line change
`@@ -150,7 +150,7 @@ def extract_csrf_token(res)`
`150`	`150`	`'uri' => normalize_uri(target_uri.path, 'index.php'),`
`151`	`151`	`'keep_cookies' => true`
`152`	`152`	`)`
`153`		`- res2.get_html_document.at('//input[@name="CRAFT_CSRF_TOKEN"]/@value')&.text`
	`153`	`+ res2&.get_html_document.at('//input[@name="CRAFT_CSRF_TOKEN"]/@value')&.text`
`154`	`154`	`end`
`155`	`155`
`156`	`156`	`def leak_session_path(csrf)`