Beveiligingsadvies

CVE-2019-25379

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-16 17:04:54
Laatst bijgewerkt 2026-03-05 01:26:25
Toegewezen door VulnCheck
CVSS-score 7.2
Status PUBLISHED

Beschrijving

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject malicious scripts. Attackers can submit POST requests with script payloads in the REDIRECT_PAGE or CHILDREN parameters to execute arbitrary JavaScript in user browsers.