CVE-2019-25388: Smoothwall Express 3.1 'ipblock.cgi' Cross-Site Scripting
Smoothwall Express 3.1-SP4-polar-x8664-update9 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by submitting crafted input to the ipblock.cgi endpoint. Attackers can inject script tags through the SRCIP and COMMENT parameters in POST requests to execute arbitrary JavaScript in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25388?
CVE-2019-25388 is classified as a medium severity vulnerability due to its potential to allow unauthorized script execution.
How can I mitigate CVE-2019-25388?
To mitigate CVE-2019-25388, it's recommended to validate and sanitize all user inputs submitted to the ipblock.cgi endpoint.
What software is affected by CVE-2019-25388?
CVE-2019-25388 affects Smoothwall Express 3.1, specifically the version 3.1-SP4-polar-x86_64-update9.
What type of vulnerability is CVE-2019-25388?
CVE-2019-25388 is a reflected cross-site scripting (XSS) vulnerability.
Can CVE-2019-25388 be exploited remotely?
Yes, CVE-2019-25388 can be exploited remotely by attackers through crafted input to the affected endpoint.