CVE-2023-37790 PoC — Broadcom CA Clarity 跨站脚本漏洞

Source

https://github.com/kaizensecurity/CVE-2023-37790

Associated Vulnerability

Title:Broadcom CA Clarity 跨站脚本漏洞 (CVE-2023-37790)
Description:Broadcom CA Clarity是美国博通（Broadcom）公司的一种企业投资规划解决方案。用于加速数字化转型。 Broadcom CA Clarity 14.3.0.298版本存在跨站脚本漏洞，该漏洞源于输入验证不足，允许远程攻击者执行跨站脚本攻击。

Readme

# CVE-2023-37790

Author: KaizenSecurity

Description: Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload function.

1. https://nvd.nist.gov/vuln/detail/CVE-2023-37790
2. https://vuldb.com/?id.244831
3. https://debricked.com/vulnerability-database/vulnerability/CVE-2023-37790
4. https://www.tenable.com/cve/CVE-2023-37790

File Snapshot


 [4.0K]  /data/pocs/df57ce169147b4a9be163e5a7227a6e4a3d2cdb9
└── [ 410]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!