← voltar
CVE-2019-25420

Comodo Dome Firewall 2.7.0 Reflected Cross-Site Scripting via snat

CVSS 5.1 MEDIUMEPSS 0.4%CWE-79
Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the snat endpoint. Attackers can send POST requests with JavaScript payloads in the port or snat_to_ip parameters to execute arbitrary scripts in users' browsers.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Produtos afetados
Comodo · Comodo Dome Firewall

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://cdome.comodo.com/firewall/https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9278&af=9278https://www.exploit-db.com/exploits/46408https://www.vulncheck.com/advisories/comodo-dome-firewall-reflected-cross-site-scripting-via-snat