Beveiligingsadvies

CVE-2019-25412

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-19 12:02:29

Laatst bijgewerkt 2026-05-24 01:36:37

Toegewezen door VulnCheck

CVSS-score 6.1

Status PUBLISHED

Beschrijving

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting unsanitized input through the NTP_SERVER_LIST parameter. Attackers can send POST requests to the /korugan/time endpoint with script payloads in the NTP_SERVER_LIST parameter to execute arbitrary JavaScript in users' browsers.

← Alle CVE's bekijken Bekijk op cve.org ↗