CVE-2019-25423: Comodo Dome Firewall 2.7.0 Cross-Site Scripting via proxyconfig
Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted POST requests with JavaScript payloads in parameters like PROXYPORT, VISIBLEHOSTNAME, ADMINMAILADDRESS, CACHEMEM, MAXSIZE, MINSIZE, and DSTNOCACHE to execute arbitrary scripts in administrator browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25423?
CVE-2019-25423 is classified as a cross-site scripting (XSS) vulnerability that is considered high severity due to the potential for attackers to inject malicious scripts.
How do I fix CVE-2019-25423?
To fix CVE-2019-25423, it is recommended to update Comodo Dome Firewall to the latest version that addresses the reflected cross-site scripting vulnerabilities.
What software is affected by CVE-2019-25423?
CVE-2019-25423 specifically affects Comodo Dome Firewall version 2.7.0.
Can CVE-2019-25423 lead to data breaches?
Yes, CVE-2019-25423 could potentially lead to data breaches by allowing attackers to execute malicious scripts and gain unauthorized access to sensitive information.
Is CVE-2019-25423 easily exploitable?
Yes, due to its nature as a cross-site scripting vulnerability, CVE-2019-25423 can be exploited easily through crafted POST requests.