CVE-2019-25423 - Comodo Dome Firewall 2.7.0 Cross-Site Scripting via proxyconfig

Back Back to CVE browser

MEDIUM

Comodo Dome Firewall 2.7.0 Cross-Site Scripting via proxyconfig

Published Feb 19, 2026

5.1

MEDIUM

CVSS 4.0

EPSS 0.41%

Description

Comodo Dome Firewall 2.7.0 contains multiple reflected cross-site scripting vulnerabilities in the /korugan/proxyconfig endpoint that allow attackers to inject malicious scripts through POST parameters. Attackers can submit crafted POST requests with JavaScript payloads in parameters like PROXY_PORT, VISIBLE_HOSTNAME, ADMIN_MAIL_ADDRESS, CACHE_MEM, MAX_SIZE, MIN_SIZE, and DST_NOCACHE to execute arbitrary scripts in administrator browsers.

Affected products

Vendor Comodo Product Comodo Dome Firewall Default
n/a
- Version
  2.7.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Comodo

Comodo Dome Firewall

n/a

Version	Status	Constraints
2.7.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://cdome.comodo.com/firewall/
product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19649
Advisory
https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9278&af=9278
productNot Applicable
https://www.exploit-db.com/exploits/46408
exploitThird Party Advisory
https://www.vulncheck.com/advisories/comodo-dome-firewall-cross-site-scripting-via-proxyconfig
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://cdome.comodo.com/firewall/		product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19649		Advisory
https://secure.comodo.com/home/purchase.php?pid=106&license=try&track=9278&af=9278		productNot Applicable
https://www.exploit-db.com/exploits/46408		exploitThird Party Advisory
https://www.vulncheck.com/advisories/comodo-dome-firewall-cross-site-scripting-via-proxyconfig		third-party-advisoryThird Party Advisory