CVE-2012-3238 Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Com...
MediumCVSS 4.3
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Backup/Restore component in WebAdmin in Astaro Security Gateway before 8.305 allows remote attackers to inject arbitrary web script or HTML via the "Comment (optional)" field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| astaro security gateway software | <= 8.3 | No fix listed |
| astaro security gateway | All versions | No fix listed |
| sophos unified threat management software | <= 8.3 | No fix listed |
| sophos unified threat management | = 110 | No fix listed |
| sophos unified threat management | = 120 | No fix listed |
| sophos unified threat management | = 220 | No fix listed |
| sophos unified threat management | = 320 | No fix listed |
| sophos unified threat management | = 425 | No fix listed |
| sophos unified threat management | = 525 | No fix listed |
| sophos unified threat management | = 625 | No fix listed |