CVE-2019-25416: Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via device Parameter
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input through the device parameter. Attackers can send POST requests to the QoS devices management endpoint with script payloads in the device parameter to execute arbitrary JavaScript in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25416?
CVE-2019-25416 is classified as a medium severity reflected cross-site scripting vulnerability.
How do I fix CVE-2019-25416?
To fix CVE-2019-25416, ensure that your Comodo Dome Firewall is updated to the latest version that includes the patch for this vulnerability.
What impact does CVE-2019-25416 have on affected systems?
CVE-2019-25416 allows attackers to inject malicious scripts through the device parameter, potentially compromising user sessions and stealing sensitive information.
Is CVE-2019-25416 remote exploit possible?
Yes, CVE-2019-25416 can be exploited remotely since it involves submitting crafted input through web requests.
Which products are affected by CVE-2019-25416?
CVE-2019-25416 affects Comodo Dome Firewall version 2.7.0.