CVE-2019-25410: Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via policy_routing
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts through the source and destination parameters. Attackers can submit POST requests to the policy routing endpoint with script payloads in these parameters to execute arbitrary JavaScript in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25410?
CVE-2019-25410 is classified as a medium-severity vulnerability due to its potential to facilitate reflected cross-site scripting attacks.
How do I fix CVE-2019-25410?
To mitigate CVE-2019-25410, ensure that you update to the latest version of Comodo Dome Firewall that addresses this vulnerability.
What type of vulnerability is CVE-2019-25410?
CVE-2019-25410 is a reflected cross-site scripting (XSS) vulnerability.
Who is affected by CVE-2019-25410?
CVE-2019-25410 affects users of Comodo Dome Firewall version 2.7.0.
What can attackers achieve with CVE-2019-25410?
Attackers can exploit CVE-2019-25410 to inject and execute malicious scripts on the user's browser through exploited parameters.