CVE-2019-25379: Smoothwall Express 3.1 'urlfilter.cgi' Cross-Site Scripting
Smoothwall Express 3.1-SP4-polar-x8664-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject malicious scripts. Attackers can submit POST requests with script payloads in the REDIRECTPAGE or CHILDREN parameters to execute arbitrary JavaScript in user browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25379?
CVE-2019-25379 is classified as a medium severity vulnerability due to the potential for XSS attacks.
How do I fix CVE-2019-25379?
To fix CVE-2019-25379, update to the latest version of Smoothwall Express or apply any available security patches.
What types of attacks can CVE-2019-25379 enable?
CVE-2019-25379 enables stored and reflected cross-site scripting (XSS) attacks, allowing attackers to inject malicious scripts.
Which versions of Smoothwall Express are affected by CVE-2019-25379?
CVE-2019-25379 specifically affects Smoothwall Express 3.1-SP4-polar-x86_64-update9.
How can I identify if my system is vulnerable to CVE-2019-25379?
You can identify if your system is vulnerable to CVE-2019-25379 by checking if you are using the affected version of Smoothwall Express and testing the urlfilter.cgi endpoint for XSS issues.