CVE-2019-25408: Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via netwizard2
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the netmaskaddr parameter. Attackers can send POST requests to the netwizard2 endpoint with script payloads in the netmaskaddr parameter to execute arbitrary JavaScript in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25408?
CVE-2019-25408 has a moderate severity level due to its potential for reflected cross-site scripting attacks.
How do I fix CVE-2019-25408?
To fix CVE-2019-25408, ensure you are running the latest version of Comodo Dome Firewall that addresses this vulnerability.
What type of vulnerability is CVE-2019-25408?
CVE-2019-25408 is a reflected cross-site scripting vulnerability affecting Comodo Dome Firewall.
Who is affected by CVE-2019-25408?
CVE-2019-25408 affects users of Comodo Dome Firewall version 2.7.0.
What could an attacker do with CVE-2019-25408?
An attacker could exploit CVE-2019-25408 to inject malicious scripts via crafted input to the netmask_addr parameter.