ZONE.CI 全球网

使用通过蓝图标题注入的存储 XSS 进行管理员帐户 cookie 渗透，并在添加“新站点”时在 /siteadmin 触发 (CVE-2024-26050)CV

使用“https://author-bugbounty-65-prod.adobecqms.net/etc/workflow/wcm/templates.htm

AMS XSS - /libs/fd/dashboard/tm/gui/components/startpoint/formview (CVE-2024-260

将 XSS 存储在“/libs/granite/ui/components/coral/foundation/clientlibs/foundation/js/

将 XSS 存储在 `/libs/fd/dashboard/sm/gui/components/clientlibs/admin/js/admin.js` 中

AMS XSS - /libs/cq/gui/components/authoring/dialog/clientlibs/dialog/js/dialog.j

AMS XSS - /libs/dam/gui/coral/components/admin/reports/reportlist/clientlibs/rep

漏洞报告 - Adob​​e Experience Manager 信息泄露 (CVE-2024-26063)CVE编号
CVE-2024-26063利用情况

`/libs/dam/gui/coral/components/admin/metadataeditor/clientlibs/metadataeditor/j

将 XSS 存储在“/foundation/js/form/response/ui/error/foundation.default.js”中（bpassing

AMS XSS - /libs/granite/ui/components/coral/foundation/form/advancedselect/statu

AMS XSS - /libs/fd/exm/gui/components/expressioneditor/customtag/customtag.jsp（重

将 XSS 存储在“libs/screens/dcc/components/clientlibs/actions/cq.screens.dcc.openLink

AMS XSS - /libs/dam/gui/coral/components/admin/asyncjobs/jobdetails/metadataexpo

`libs/screens/dcc/components/fileuploaddrop/clientlibs/js/dropzone.js` 中的 DOM XS

AMS XSS - /libs/cq/searchpromote/components/colors/facetcontent.jsp（重新测试 1727950

AMS XSS - /libs/granite/operations/clientlibs/healthreports/js/healthreports.js

AMS XSS - /libs/cq/searchpromote/components/results/results.jsp（重新测试 1727900）（CV

AMS XSS - /libs/cq/searchpromote/components/banners/banners.jsp（重新测试 1727957）（CV

AMS XSS - /libs/cq/searchpromote/components/nestedlist/facetcontent.jsp（重新测试 172

AMS XSS - /libs/cq/searchpromote/components/ ratings/facetcontent.jsp（重新测试 17279

AMS XSS - /libs/cq/searchpromote/components/linklist/facetcontent.jsp（重新测试 17279

AMS XSS - /libs/clientlibs/social/enablement/core/listeners.js (jquery var) (CVE

AMS/云服务 - 子列表选择器可用于运行各种有问题的 AEM 资源（重新测试 1497173 第 1 部分）(CVE-2024-26107)CVE编号
CV

AMS - /bin/wcm/contentfinder/asset/view?itemResourceType（未修复 - 报告 1847219）(CVE-2