CVE-2019-25426: Comodo Dome Firewall 2.7.0 Cross-Site Scripting via dnsmasq
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the dnsmasq endpoint. Attackers can send POST requests with script payloads in the TRANSPARENTSOURCEBYPASS or TRANSPARENTDESTINATIONBYPASS parameters to execute arbitrary JavaScript in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25426?
CVE-2019-25426 is classified as a medium severity vulnerability due to the potential for reflected cross-site scripting attacks.
How do I fix CVE-2019-25426?
To mitigate CVE-2019-25426, update Comodo Dome Firewall to the latest version that addresses this reflected cross-site scripting vulnerability.
What impact does CVE-2019-25426 have on users?
CVE-2019-25426 allows attackers to execute malicious scripts in the context of the user's browser, potentially compromising user data.
Is CVE-2019-25426 remotely exploitable?
Yes, CVE-2019-25426 can be exploited remotely by sending crafted POST requests to the affected dnsmasq endpoint.
Who is affected by CVE-2019-25426?
Any user or organization utilizing Comodo Dome Firewall version 2.7.0 is impacted by CVE-2019-25426.