CVE-2019-25429: Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via openvpn_advanced
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the openvpnadvanced endpoint. Attackers can inject JavaScript code through the GLOBALNETWORKS and GLOBALDNS parameters via POST requests to execute arbitrary scripts in users' browsers.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25429?
CVE-2019-25429 is classified as a reflected cross-site scripting vulnerability.
How do I fix CVE-2019-25429?
To fix CVE-2019-25429, ensure your Comodo Dome Firewall is updated to the latest version that mitigates this vulnerability.
What versions of Comodo Dome Firewall are affected by CVE-2019-25429?
CVE-2019-25429 specifically affects Comodo Dome Firewall version 2.7.0.
What type of vulnerability is CVE-2019-25429?
CVE-2019-25429 is a reflected cross-site scripting vulnerability.
Can CVE-2019-25429 allow attackers to execute scripts?
Yes, CVE-2019-25429 allows attackers to inject and execute malicious scripts through crafted input.