CVE-2019-25415: Comodo Dome Firewall 2.7.0 Cross-Site Scripting via hotspot_permanent_users
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input to the hotspotpermanentusers endpoint. Attackers can send POST requests with JavaScript payloads in the MACADDRESSES parameter to execute arbitrary scripts in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25415?
CVE-2019-25415 is categorized as a moderate severity cross-site scripting vulnerability.
How do I fix CVE-2019-25415?
To mitigate CVE-2019-25415, ensure that input validation and output encoding are properly implemented in the hotspot_permanent_users endpoint.
Who is affected by CVE-2019-25415?
CVE-2019-25415 affects users of Comodo Dome Firewall version 2.7.0.
What type of vulnerability is CVE-2019-25415?
CVE-2019-25415 is a reflected cross-site scripting (XSS) vulnerability.
Can CVE-2019-25415 lead to further attacks?
Yes, CVE-2019-25415 can allow attackers to inject malicious scripts, potentially leading to other attacks such as data theft or session hijacking.