Smoothwall Express: Malicious Script Injection via URL Filter

Summary

Smoothwall Express has a security weakness that allows hackers to inject malicious code into users' browsers. This can happen when a user visits a website that sends a specific request to the Smoothwall Express system. To protect your network, update your Smoothwall Express to the latest version available.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
smoothwall	smoothwall_express	3.1	–

Original title

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject malicious scripts. At...

Original description

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains stored and reflected cross-site scripting vulnerabilities in the urlfilter.cgi endpoint that allow attackers to inject malicious scripts. Attackers can submit POST requests with script payloads in the REDIRECT_PAGE or CHILDREN parameters to execute arbitrary JavaScript in user browsers.

nvd CVSS3.1 7.2

nvd CVSS4.0 5.3

Vulnerability type

CWE-79 Cross-site Scripting (XSS)

http://www.smoothwall.org Product
https://www.exploit-db.com/exploits/46333 Exploit Third Party Advisory VDB Entry
https://www.vulncheck.com/advisories/smoothwall-express-urlfiltercgi-cross-site-... Broken Link