CVE-2012-3238

Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2012-07-09

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Security Gateway (Astaro)
• Security Gateway Software (Astaro)
• Unified Threat Management (Sophos)
• Unified Threat Management Software (Sophos)

References

• http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0206.html
• http://security.inshell.net/advisory/27
• http://www.astaro.com/en-uk/blog/up2date/8305