Description
Palo Alto Networks PAN-OS® 软件的 GlobalProtect™ 网关和门户功能中存在一个反射型跨站点脚本 （XSS）漏洞，当经过身份验证的强制网络门户用户单击特制链接时，该漏洞允许在其浏览器上下文中执行恶意 JavaScript
PAN-OS 反射xss CVE-2025-0133
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://security.paloaltonetworks.com/CVE-2025-0133
https://nvd.nist.gov/vuln/detail/CVE-2025-0133
https://www.ddpoc.com/DVB-2025-9402.html
https://cve.imfht.com/poc_detail/d351046d25c94033736c162112f02ff35e34e903
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0133.yaml
https://www.tenable.com/plugins/nessus/236406
https://bdziyi.com/65976/
https://medium.com/@blog.krishoffsec/cve-2025-0133-reflected-xss-in-palo-alto-globalprotect-pan-os-exploit-analysis-poc-7468e29fc7a3
https://www.invicti.com/web-application-vulnerabilities/pan-os-globalprotect-xss-cve-2025-0133