CVE-2012-3238 in Firewall
摘要 (英语)
Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.
Be aware that VulDB is the high quality source for vulnerability data.
预定
2012-06-06
披露
2012-07-09
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 5462 | Astaro Firewall IPsec 跨网站脚本 | 79 | 未定义 | 官方修复 | CVE-2012-3238 |