CVE-2019-25421: Comodo Dome Firewall 2.7.0 Cross-Site Scripting via policyfw
Comodo Dome Firewall 2.7.0 contains multiple cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through the policyfw endpoint. Attackers can submit POST requests with JavaScript payloads in the mac, target, and remark parameters to execute arbitrary code in administrator browsers or store persistent scripts in the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25421?
CVE-2019-25421 has been classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2019-25421?
To mitigate CVE-2019-25421, upgrade to the latest version of Comodo Dome Firewall that addresses the cross-site scripting vulnerabilities.
What systems are affected by CVE-2019-25421?
CVE-2019-25421 affects Comodo Dome Firewall version 2.7.0.
What type of vulnerability is CVE-2019-25421?
CVE-2019-25421 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
Can CVE-2019-25421 allow attackers to execute arbitrary code?
Yes, CVE-2019-25421 can potentially allow attackers to execute arbitrary code through the injection of malicious scripts.