Description
Apache CloudStack是美国阿帕奇（Apache）基金会的一套基础架构即服务（IaaS）云计算平台。该平台主要用于部署和管理大型虚拟机网络。
Apache CloudStack SAML XXE漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cloudstack.apache.org/blog/cve-2022-35741/
https://cvefeed.io/vuln/detail/CVE-2022-35741
https://github.com/advisories/GHSA-r3xj-vjpq-7cvq
https://www.shapeblue.com/shapeblue-security-advisory-for-cve-2022-35741/
https://avd.aliyun.com/detail?id=AVD-2022-35741
https://www.dwcon.cn/post/1754
https://www.h3c.com/cn/d_202211/1715081_30003_0.htm
https://da22le.github.io/cve-2022-35741-apache-cloudstack-saml-xxe%E6%B3%A8%E5%85%A5/
https://www.4hou.com/index.php/posts/GKYJ
https://dbugs.ptsecurity.com/vulnerability/PT-2022-3718
https://stack.watch/product/apache/cloudstack/
https://nvd.nist.gov/vuln/detail/CVE-2022-35741
https://cve.akaoma.com/cve-2022-35741
https://www.tenable.com/cve/CVE-2022-35741
https://advisories.gitlab.com/pkg/maven/org.apache.cloudstack/cloudstack/
https://www.syue.com/News/Safe/39106.html
https://www.openwall.com/lists/oss-security/2024/07/19/1
https://pentest-tools.com/vulnerabilities-exploits/apache-cloudstack-saml-signature-exclusion_22994
https://notcve.org/search.php?query=vendor%3A%22Apache%22%2Bproduct%3A%22Cloudstack%22%2Bversion%3A%22+%3E%3D+4.11.0.0+%3C+4.20.3.0%22
https://lists.apache.org/thread/hwhxvtwp1d5dsm156bsf1cnyvtmrfv3f