Smoothwall Express Proxy Configuration Page Allows Malicious Script Injection

Summary

An attacker can inject malicious scripts into the Smoothwall Express proxy configuration page, potentially allowing them to steal data or take control of users' browsers. This happens when a user accesses the proxy configuration page after an attacker has submitted a malicious request. We recommend updating to the latest version of Smoothwall Express to fix this issue.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software

Vendor	Product	Affected versions	Fix available
smoothwall	smoothwall_express	3.1	–

Original title

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple cross-site scripting vulnerabilities in the proxy.cgi endpoint that allow attackers to inject malicious scripts through parameters ...

Original description

Smoothwall Express 3.1-SP4-polar-x86_64-update9 contains multiple cross-site scripting vulnerabilities in the proxy.cgi endpoint that allow attackers to inject malicious scripts through parameters including CACHE_SIZE, MAX_SIZE, MIN_SIZE, MAX_OUTGOING_SIZE, and MAX_INCOMING_SIZE. Attackers can submit POST requests with script payloads to store or reflect arbitrary JavaScript code that executes in users' browsers when the proxy configuration page is accessed.

nvd CVSS3.1 6.1

nvd CVSS4.0 5.1

Vulnerability type

CWE-79 Cross-site Scripting (XSS)

http://www.smoothwall.org Product
https://www.exploit-db.com/exploits/46333 Exploit Third Party Advisory VDB Entry
https://www.vulncheck.com/advisories/smoothwall-express-proxycgi-cross-site-scri... Broken Link