CVE-2023-3971 PoC — Red Hat Ansible automation controller 跨站脚本漏洞

Source

https://github.com/ashangp923/CVE-2023-3971

Associated Vulnerability

Title:Red Hat Ansible automation controller 跨站脚本漏洞 (CVE-2023-3971)
Description:Red Hat Ansible automation controller是美国红帽（Red Hat）公司的一种集中的管理工具。用于管理库存、启动和安排工作流、跟踪更改以及将报告与集中的用户界面集成。 Red Hat Ansible automation controller 存在安全漏洞，该漏洞源于在用户界面设置的控制器中存在HTML注入，允许攻击者通过注入HTML创建自定义登录页面来捕获凭据，从而导致完全妥协。

Description

To find HTML injection and XSS

File Snapshot


 [4.0K]  /data/pocs/0ca1e7ca643167ba345f4e8913fd30dc657f3af6
├── [230K]  it22327680_cve-2023-3971.pdf
├── [2.4K]  login.php
└── [  41]  Tryhackme Room link.txt

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!