CVE-2024-52763 PoC — Ganglia 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52763.yaml

Associated Vulnerability

Title:Ganglia 安全漏洞 (CVE-2024-52763)
Description:Ganglia是一套用于高性能计算系统、群集和网络的可扩展的分布式监视工具。该产品主要用于查看实时或记录的监控数据。 Ganglia v3.73至v3.75版本存在安全漏洞，该漏洞源于容易受到跨站脚本攻击，攻击者可通过向参数中注入精心设计的有效载荷来执行任意Web脚本或HTML。

Description

A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.php of Ganglia-web v3.73 to v3.75 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "g" parameter.

File Snapshot


 id: CVE-2024-52763

info:
  name: Ganglia Web Interface (v3.7.3 - v3.7.5) - Cross-Site Scripting
  a

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!