CVE-2019-25379: falha de média gravidade em Smoothwall Express
Smoothwall Express 3.1 'urlfilter.cgi' Cross-Site Scripting
Publicada em · Atualizada em
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
probabilidade de exploração
0.3%top 83% das CVEs
exploração observada
nãonenhuma fonte reporta
Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject malicious scripts. Attackers can submit POST requests with script payloads in the REDIRECT_PAGE or CHILDREN parameters to execute arbitrary JavaScript in user browsers.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Produtos afetados
Smoothwall · Smoothwall ExpressCVEs relacionadas — Smoothwall Express
No mesmo produto, das mais perigosas para as menos.
CVE-2011-1084—CVE-2011-1084EPSS 0.6%CVE-2011-1085—CVE-2011-1085EPSS 0.5%CVE-2019-25382MEDIUMSmoothwall Express 3.1 'time.cgi' Cross-Site ScriptingEPSS 0.3%CVE-2019-25392MEDIUMSmoothwall Express 3.1 'iptools.cgi' Cross-Site ScriptingEPSS 0.3%CVE-2019-25389MEDIUMSmoothwall Express 3.1 'timedaccess.cgi' Cross-Site ScriptingEPSS 0.3%CVE-2019-25388MEDIUMSmoothwall Express 3.1 'ipblock.cgi' Cross-Site ScriptingEPSS 0.3%