Description
H3C SSL VPN存在跨站脚本漏洞，此漏洞是由于对cookie验证不足导致的。
H3C SSL VPN cookie 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.nsfocus.net/vulndb/69253
https://vulners.com/cnnvd/CNNVD-202207-690
https://avd.aliyun.com/detail?id=AVD-2022-35416
https://nvd.nist.gov/vuln/detail/CVE-2022-35416
https://pentest-tools.com/vulnerabilities-exploits/h3c-ssl-vpn-2022-07-10-cross-site-scripting_2598
https://github.com/advisories/GHSA-9x76-78gc-r3m9
https://access.redhat.com/security/cve/cve-2022-35416
https://stack.chaitin.com/poc/detail/686
https://www.sxxdckj.com/cms/a/H3C-SSL-VPN-kua-zhan-jue-ben-lou-dong.html
https://scanrepeat.com/vulnerability-database/ssl-vpn-cross-site-scripting
https://www.variotdbs.pl/vuln/VAR-202207-0427/