（CVE-2025-4617）Palo Alto Networks Prisma Browser截图控制绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-4617
• https://www.cve.org/CVERecord?id=CVE-2025-4617
• https://security.paloaltonetworks.com/PAN-SA-2025-0018
• https://github.com/advisories/GHSA-gqv5-gqc6-qrch
• https://cve.imfht.com/detail/CVE-2025-4617
• https://app.opencve.io/cve/?product=prisma_browser&vendor=paloaltonetworks
• https://cve.circl.lu/vuln/cve-2025-4617
• https://patchcast.com/cve-2025-4617/
• https://cvefeed.io/vuln/detail/CVE-2025-4617

Related Vulnerabilities

• Palo Alto Networks PAN-OS GlobalProtect /ssl-vpn/login.esp 权限绕过漏洞（CVE-2026-0257）
• Palo Alto Networks Expedition /API/regionsDiscovery.php 命令执行漏洞（CVE-2025-0107）
• PoCprisma-schema-exposure: Exposed Prisma Database Schema - Exposure
• Cambium Networks Canopy /login.cgi 默认口令漏洞
• （CVE-2025-4618）Palo Alto Networks Prisma Browser敏感信息泄露漏洞
• CVE-2023-20888: VMware Aria Operations for Networks - Remote Code Execution
• PoCCVE-2008-4668: Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion
• PoCCVE-2018-10141: Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting
• PoCCVE-2018-9161: PrismaWEB - Credentials Disclosure
• PoCCVE-2020-2036: Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting
• PoCCVE-2021-21287: MinIO Browser API - Server-Side Request Forgery
• PoCCVE-2021-24409: Prismatic < 2.8 - Cross-Site Scripting