CVE-2020-8430: URL Redirection to Untrusted Site

Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string...

Stormshield Network Security Redirection Vulnerability

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. A security vulnerability exists in Stormshield Network Security. An attacker could exploit this vulnerability to redirect users to malicious websites...

Stormshield Network Security Cross-Site Scripting Vulnerability

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. A cross-site scripting vulnerability exists in the command line interface of the SNS web server in Stormshield Network Security versions 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1...

CVE-2018-20850

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...

CVE-2018-20850

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...

Cross site scripting

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...

CVE-2018-20850

Stormshield Network Security versions 2.0.0–2.13.0 and 3.0.0–3.7.1 contain a self‑XSS vulnerability in the SNS web server's command‑line interface. The issue stems from a lack of proper validation in the web application, enabling local attackers to trigger client‑side script execution. No remedia...

CVE-2018-20850: Improper Neutralization of Input During Web Page Generation

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server...